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FOREWORD 


This final report was prepared by the Martin Marietta 
Corporation under extension to Contract NAS8-25619, "Space 
Shuttle Propulsion Systems On-Board Checkout and Monitoring 
System Development Study", for the George C. Marshall Space 
Flight Center of the National Aeronautics and Space Admin- 
istration. The report is comprised of two volumes: 

Volume 1 - Summary and Technical Results 

Volume II - Guidelines for Incorporation of the On- 
Board Checkout and Monitoring Function 
on The Space Shuttle. 
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SUMMARY 


This study was conducted as an extension to basic Contract NAS8-25619. 
The Phase B system and main engine studies and certain related technol- 
ogy studies were reviewed under Task 1 to update the results of the 
basic study. The resultant conclusions and recommendations included 
the following: 

Techniques exist for bearing incipient failure detection, 
but require further development. No singularized approach 
for leak detection and monitoring appears feasible; several 
potential techniques for particular leak detection applica- 
tions were recommended for further development. 

Task 2 of the study consisted of generating a guidelines document that 
delineates the approach, methodology and verification requirements for 
defining and analyzing the propulsion systems to establish and imple- 
ment the checkout and monitoring requirements. The resultant document, 
Guidelines for Incorporation of the Onboard Checkout and Monitoring 
Function on the Space Shuttle , is published as Volume II of this report. 

Task 3 was conducted to define the checkout and monitoring requirements 
of the Titan III L Space Shuttle booster, and to define an approach for 
implementing the requirements. Conclusions and recommendations of Task 
3 are summarized as follows: 

The onboard checkout and monitoring functions defined in the 
Guidelines For Incorporation document are applicable to an expend- 
able booster; the degree of onboard capability incorporation 
differed between the baseline expendable booster configuration 
and the recoverable, reusable configuration evaluated in the 
basic study. 

The booster checkout and monitoring impact on orbiter require- 
ments was slight, as was the impact on existing propulsion hard- 
ware design. 

The booster propulsion systems' measurement requirements, as 
derived in the study, consisted of 35 control measurements, 28 
fault detection measurements and 125 performance analysis measure- 
ments, for a total of 188 propulsion system measurements. 

Areas recommended for futher technology work to enable optimum 
Incorporation of the checkout and monitoring function consisted 
of a solid rocket motor case burnthrough detector, and leakage 
detectors . 
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INTRODUCTION 



A , BACKGROUND 

Under basic Contract NAS8-25619, the Martin Marietta Corporation 
analyzed the Space Shuttle propulsion systems to define the onboard 
checkout and monitoring function, A baseline Space Shuttle vehicle 
and mission was used to establish the techniques and approach for 
defining the propulsion systems f checkout and monitoring requirements * 
and for analyzing these requirements to formulate criteria for imple- 
menting the functions of preflight checkout, performance monitoring, 
fault isolation, emergency detection, display, data storage, post- 
flight evaluation, and maintenance retest* The final report on this 
basic contract was completed and distributed in April, 1971* 

In May, 1971, work was initiated on an extension to the basic 
contract. Space Shuttle systems and technology studies had been 
conducted concurrently with the basic contract; such studies that 
included elements pertinent to the checkout and monitoring function 
were identified for review to update and expand the results of the 
basic study. This review and updating comprised Task 1 of the 
program extension. Under Task 2 of the extension, the design guide- 
lines and constraints , concept development procedures, and general 
methodology developed in the basic study, updated to utilize the 
results of the concurrent Space Shuttle studies, formed the basis 
for generation of guidelines for the incorporation of the checkout 
and monitoring function. Also, because expendable boosters for the 
Space Shuttle vehicle came under consideration after initiation of 
this contract extension. Task 3 was added to evaluate the propulsion 
checkout and monitoring requirements and implementation criteria for 
a selected expendable booster. 

Tills final report presents the results of the three tasks per- 
formed under the contract extension. The report is comprised of two 
volumes. Volume I describes the objectives and approach for each of 
the three tasks, and presents the results of Task 1 and Task 3, 

Volume II contains the Task 2 results, i,e,, "Guidelines for Incor- 
poration of the Onboard Checkout and Monitoring Function of the Space 
Shuttle", 

B. APPROACH 


Hie approach used in the study is illustrated in Figure I-l« 

Tasks 1 and 2 were conducted concurrently, with Task 3 being initiated 
at the midpoint of the program. Monthly and quarterly progress re- 
ports were issued, and 'formal program reviews were conducted at 
approximately six-week intervals. 
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Scope : Task 1 was comprised of updating the basic study by 

reviewing results of the Space Shuttle System Phase B Studies, 
the Space Shuttle Main Engine Phase B Studies, and selected 
related Space Shuttle technology studies. The following 
studies were subjected to review in this task: 

Space Shuttle System Phase B Studies - Contracts 
NAS8-26016 and NAS9-10960 by McDonnell Douglas 
and North American Rockwell were vehicle definition 
studies that addressed all phAses of operation and 
defined system design approaches. Our review of these 
study results was concentrated on the orbiter. 

Space Shuttle Main Engine Phase B Studies - Space 
Shuttle main engine definition studies were conducted 
under Contracts NAS8- 26186, -26187 and -26188 by 
Pratt & Whitney, Rocketdyne, and Aerojet, respectively. 
The Rocketdyne study results were reviewed; because 
of the unavailability of documentation on the other two 
contracts, the effort originally allocated for their 
review was reallocated to the special interest areas 
of bearing incipient failure detection and leakage 
detection. 

Related Technology Studies - The results of the follow- 
ing related studies were assessed in this task: 

Contracts NAS10-7145 and NAS10-7788 (General 
Electric). The basic study was an evaluation of 
techniques for automatic self-contained readiness 
assessment of mechanical components. The follow-on 
program is an evaluation of structure borne acoustics 
as a readiness assessment technique. 

Contract NAS10-7291 (Pearce and Associates). The 
objectives of this study were to define a faster 
and more reliable method to detect tank and sys- 
tem leaks, to demonstrate a prototype leak detector, 
and to develop associated flight weight electronics. 

Contract NAS9-11330 (Lockheed Missiles and Space 
Company). This study defined and evaluated cryo- 
genic supply subsystems for the orbiter. 



Contract NAS8-26378 (SCI Electronics, Inc.). The 
objective of this study is to define the optimum 
data bus system for Space Shuttle* 

Contract E3AS1Q-7258 (Martin Marietta Corporation)* 
This study of propellants and gases handling for 
Space Shuttle included an assessment of techniques 
for propellant level sensing and quantity gaging* 

The specific approach used in evaluating these study 
results are presented in Chapter II of this volume, 
together with the results of the task. 

Task 2, consisting of the generation of guidelines for the 
incorporation of the checkout and monitoring function, was 
conducted by incremental preparation, submittal and review 
of each of the sections of the document. Chapter III of this 
volume describes the task objectives and results, and the 
resultant guidelines document forms Volume II of this report* 

Task 3 was conducted to define the checkout and monitoring 
function of the propulsion systems of an expendable booster 
for Space Shuttle, Titan III L was selected as the baseline 
booster for the study* The approach followed was derived 
in the basic study and consisted of defining in detail the 
propulsion and associated avionics systems, analyzing the 
propulsion systems to establish control, checkout and monitor- 
ing requirements, and conducting further analysis to define 
the techniques for implementing the checkout and monitoring 
function. The results of this task are presented in Chapter 
IV of this volume, 

PROGRAM PERSONNEL 

The following personnel made primary contributions to this program 

Martin Marietta Corporation 


D, Dal Duca 
R, Drew 
R, Mueller 


A, O'Connell 

R* VandeKoppel (Program Manager) 
R, Whitted 
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NASA 


J. Fries 
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Douglas Corporation, Pearce and Associates, Rocketdyne, and SKF 
Industries, Inc. personnel in the conduct of this study. Specific 
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failure detection and leakage detection are identified in the text 
of the appropriate paragraphs. 
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A * TASK 1 OBJECTIV ES 

X- S cope - Task I consisted of updating the findings of the basic 
study through review and evaluation of the Space Shuttle Phase 
B System Studies , the Phase B Main Engine Studies , and certain 
other related technology studies * 

a, Phase B, System Studies - Contracts NAS9-10960 and NAS8-26016 
by North American Rockwell and McDonnell Douglas* respectively* 
were Space Shuttle vehicle definition studies that addressed 
vehicle configuration definition and operations* 

b, Phase B Main Engine Studie s - Space Shuttle main engine def- 
inition studies were conducted by Pratt & Whitney* Rocketdyne, 
and Aerojet under Contracts NAS8-26186* NAS8-26187* NAS8-26188, 
respectively* 

c, Related Tec h nology Studies - Contract NAS8-26378 is a study 
of data bus techniques for Space Shuttle, It is being con- 
ducted by SCI Electronics, Inc, 

Contract NAS9-11330 is a study that is being conducted by 
Lockheed Missiles and Space Company, Its purpose is to de- 
fine and optimize techniques for the cryogenic fluid storage 
and supply functions of the Space Shuttle, 

Contract NAS10-7145 was a study conducted by General Electric 
to define and evaulate techniques for automatic self-contained 
readiness assessment and fault isolation of ground and on- 
board mechanical systems, A follow-on study under Contract 
NAS10-7788 is being conducted by General Electric to evaluate 
structure-borne acoustics as a technique for mechanical sys- 
tems readiness assessment * 

NAS10-7291 (Pearce Associates): This study was conducted 

to develop improved methods to detect leakage in fluid 
systems for the Space Shuttle, A portion of the documen- 
tation from this study was previously reviewed. 

Contract NAS10-7258 (Martin Marietta Corporation) was a 
study of propellants and gases handling in support of Space 
Shuttle, The study included a task that reviewed propellant 
level sensing and quantity gaging techniques, 

2, App r oach - Because of the basic differences in content and ob- 
jectives of these related studies* a checklist system was employed 
for the review and evaluation. The topics comprizing the check- 
list are described below: 



II-2 


a, Major Propu l sion System Differences - This item pertains to 
the identification of differences between the propulsion 
systems of the Design Reference Model of the basic study 
and those of the related Phase B studies* Of interest were 
those differences that would affect the results of the basic 
study* Emphasis was placed on those differences that directly 
affect subsequent items of this checklist. 

Candidates of potential significance in this regard included 
the following : 

Main engines and main engine controllers; 

Airbreathing engines and engine controllers; 

Auxiliary Propulsion System assemblies; 

Orbital Maneuvering System; 

Assemblies and components such as valve actuators, regula- 
tors, check valves, propellant gaging systems, and auxiliary 
power unit drive assemblies* 

b . Parameter Definition and Measurement Se l ect ion - Parameter 
definition is the identification and specification of the 
physical quantity about which certain information is re- 
quired to accomplish the objectives of the checkout and 
monitoring function* Measurement selection is the method 
employed by the checkout and monitoring function to acquire 
the desired information* The basic steps necessary to 
arrive at comprehensive parameter definitions, which in turn 
lead to measurement selections, are the failure modes and 
effects analysis and the checkout and monitoring requirements 
analysis* The review included an assessment of these analyses 
for their adequacy in making the specified parameter defini- 
tions and measurement selections* Attention was given to 
eliminating duplicate and nonessential parameters, in addi- 
tion to identifying any simplifying steps which the Phase B 
study teams devised in arriving at their parameter defini- 
tions and measurement selections * 

c * Sensing Methods, S en sing Se lectio n , Sensor Technology Sta tus 
a_nd N ew Requirement s - An evaluation was made of the sensors 
identified by the related studies to establish whether 
solutions were derived in those areas that the basic MASS- 
25619 defined as potential new technology requirements* 
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d . Sensor Characteristics * Sensor Location, Sample Rate* and 
Built-in Test Equipment Requirements - In conjunction with 
the proceeding review item* the sensor specifications of 
the related and basic studies were evaluated to ensure that 
minimum requirements consistent with the intended applica- 
tion were specified, 

e. Special Sensing vs. Use of Functional Signals - The sensing 
techniques defined in the various studies were evaluated to 
determine whether those parameters or types of parameters 
for which functional Inputs and outputs could be used as a 
source of data were recommended in lieu of using a special 
or dedicated sensing device to acquire the requisite infor- 
mation* This effort included an assessment of the criticality 
assigned to the various propulsion elements along with the 
corresponding recommendations for failure detection to deter- 
mine whether or not some or all of the sensors assigned to 

an element could be eliminated through the use of existing 
functional signals, 

f* Checkout and Monitoring vs* Statisti c al Replacement - 

Statistical replacement is the use of operating data* in 
the form of running time or number of cycles or events which 
an element has accumulated or undergone in its lifetime, to 
determine when it is due for maintenance or replacement. 

This technique is based on the use of extensive test and 
operating histories of a particular element and a statistical 
prediction of when such elements are likely to exhibit high 
failure rates. The applicable material was reviewed to 
determine where statistical replacement had been specified, 
and, in such cases, to identify the rationale that led to 
this recommendation, 

g* Degree of Pref light. Inflight, and Postflight C/O&M Usage - 
A set of criteria and concepts was developed during the* 
basic study from which the functions of onboard checkout 
and monitoring of the Space Shuttle propulsion systems dur- 
ing preflight, inflight, and postflight were delineated* 

The Phase B studies were examined to identify departures 
from the delineation, along with supporting rationale. 
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h. Significance of Data - The significance attached to the 
data being collected and processed. In terms of data usage, 
was reviewed and compared with the basic study results. 

The task identified data to be recorded for future trouble- 
shooting and refurbishment or trend analysis displayed to 
the crew for status or caution and warnings and data to be 
discarded because it indicates normal propulsion system 
operation. 

i. O nboard Checkout vs. Ground Supp o rt Equipme nt - The basic 
study recommended a small amount of ground equipment for 
checkout and monitoring purposes. The related Phase B 
study results were analyzed to determine whether or not 
they contained improved techniques for performing the 
functions for which ground equipment was identified, and 
whether some of the ground equipment was replaced by on- 
board capability. 

j. Impact of Requirements of Other Systems - This item deals 
with the impact of simultaneous demands of the other onboard 
systems on the onboard capabilities of the vehicle data bus, 
the central computer processing capability, the data storage 
facilities, the caution and warning systems, the display 
facilities, and the crew. Tne related studies were evaluated 
for information relating to the Impact of other systems on 
common onboard resources to determine a potential degradation 
of performance of the propulsion checkout and monitoring 
function due to these demands. The principal information 
source evaluated for this item was the data bus traffic 
estimates and computer processing estimates presented in 

the Phase B system studies. The Phase B Main Engine studies 
were also examined to identify any significant deviations 
in data management requirements from the Phase B System 
studies or the basic study results. 
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B . TASK 1 RESULTS SUMMARY 

1. Discussion - In the review of the Phase B System studies, 
emphasis was placed on the orbiter. Review of the main engine 
work was limited to the Rocketdyne main engine study due to the 
unavailability of the Aerojet and Pratt & Whitney reports. The 
time originally alloted for the two unavailable studies was pri- 
marily utilized in two special interest areas; leakage detection 
and bearing incipient failure detection, identified in our basic 
study. The Phase I portion of Contract NAS10-7291 (Pearce & 
Associates) was previously reviewed ; however, that material 

was re-examined and the subsequent Phase II material was 
evaluated. In all cases, the review and evaluation of the re- 
lated studies was limited to those items that impact onboard 
checkout and monitoring. 

2. Conclusions - Review of related Space Shuttle studies reaffirmed 
the fundamental findings of our basic contract which concluded 
that "the checkout and monitoring approach is technically feasi- 
ble, will improve system reliability, simplify ground operations, 
and reduce turnaround time. The implementation of the function 
must be controlled by a requirements standard , to ensure that 
the necessary approach and methodology are utilized, and so that 
the required degree of propulsion and electronics systems inte- 
gration is accomplished. The basic design of the propulsion 
systems must incorporate the checkout and monitoring functional 
requirements including sensors. M 

On an individual basis, each study contributed to our objective 
of updating the baseline. The documentation reviewed aided us 
in establishing a better functional description which is re- 
flected in the "Guidelines for Incorporation of the Onboard 
Checkout and Monitoring Function for the Space Shuttle" - Task 
II. A summary of the study review and evaluation results is 
presented in Table II-l. 

Our update of the new technology area is also significant. 

The evaluation indicated that technology exists for bearing 
incipient failure detection, and can be applied by analyzing 
the Space Shuttle's rotating machinery to define the bearings 1 
operating characteristics and incipient failure detection 
requirements,' and then developing the sensor and data handl- 
ing hardware and techniques . .-mmensurate with the requirements. 



Our evaluation of leak detection technology and applications 

resulted in the following conclusions: 

. Conventional ground leak checks do not adequately ensure 
that acceptable leakage rates can be maintained during 
flight operations. This approach is costly and time- 
consuming, and therefore, is not compatible with Space 
Shuttle operational concepts, 

. Inflight leak detection devices that can measure component 
internal leakage have not been developed. Leak detection 
methods that could locate and measure external leakage 
inflight have been identified (Table 11-12), but have not 
been developed. 

. Inflight hazardous gas detection has been identified as 
a potential requirement for the orbiter, but equipment 
is not necessarily available that has the required response 
time for emergency detection, and that is operable from 
sea level pressure to vacuum conditions. 

, We recommend that inflight leak detection development 
efforts be pursued, with the objective of producing an 
integrated approach for accomplishing the functions of 
internal leakage, external leakage, and inflight hazardous 
gas detection. 
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C. REVIEWS OF SYSTEMS STUDIES 


1 . Contracts HAS8-260 16 (MDC) and NAS9-10960 (NAR) 

Title : Space Shuttle Phase B System Definition Studies. 

S tudy Objective : To analyze and provide a preliminary design 

for a completely reusable two stage Space Shuttle. 


S cope of Review : With the addition of Task 3 to the original 

plan for the extension to Contract NLAS8-25619, it was decided 
that the review of the Phase B System Studies should primarily 
encompass the orbiter, since Task 3 was addressed to an expend- 
able booster. Therefore, this review has encompassed the 
following documents: 


NAS8-26016 (MDC) 


Document Number 


T itle 


MDC E0308 Part I 
MDC E0308 Part II-l 
MDC E0308 Part II-2(A) 
MDC E0308 Part II-2(B) 
MDC E0395 Supplement 1 


Executive Summary 

Technical Summary - Shuttle System 
Technical Summary - Orbiter 
Technical Summary - Orbiter 
Orbiter Data List 


NAS9-10960 (NAR) 


Document Number 


Title 


SD 71-114-1 
SD 71-114-2 

SD 71-114-2 
SD 71-114-2 


Volume I, Executive Summary 
Volume II, Technical Summary; Book 1, 
Space Shuttle Program Definition 
Volume II, Technical Summary; Book 2, 
Orbiter Vehicle Definition (Part 1 of 
2 ) 

Volume II, Technical Summary; Book 2, 
Orbiter Vehicle Definition (Part 2 of 
2 ) 


The review of this documentation has been confined to the 
orbiter propulsion systems, the propulsion system instrumen- 
tation, and those onboard and ground systems related to the 
onboard checkout and monitoring functions of the propulsion 
systems. The review of the propulsion system requirements and 
design was to assess the impact of differences between them 
and the NAS8-25619 baseline on the onboard checkout and monitor- 
ing function requirements that were identified in our basic 
contract . 
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Results of Review : The results of the review of the Phase B 

System Studies are summarized and compared to the results of 
basic Contract NAS8-25619 in Table II-2. Significant differences 
and/or recommendations are noted where applicable. In summary: 

- No propulsion system differences were found that had s 
significant impact on the OGMF requirements. 

- It is recommended the NAS8-25619 baseline be updated to 
specify that main engine data used solely for postflight 
evaluation be shipped to the maintenance recorder via an 
independent transmission link to allow greater data bus 
capability to handle contingencies. 

Two items of significance were found in OCMF concepts* 

First, our basic study indicated that fault isolation to 
the LRU level can and should be done inflight. The MDC 
study indicated that LRU fault isolation capability would 
only be provided in the maintenance area. NAR indicated 
that inflight fault isolation capability would be at least 
to the functional path level and that capability would be 
provided on the ground for LRU fault isolation but the 
decision on whether or not the software would be ground 
or airborne would be deferred* For the reasons noted in 
Table II-2 (page 11-14), our baseline emphasis of inflight 
fault isolation to the LRU level is valid* 

Secondly, the capability for discreet component control 
for special tests, such as valve sequencing, was not specif- 
ically identified in the basic study* This capability should 
be reflected in the updated baseline* 
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2, Contract NAS8-26187 (Rocketdyne) 

Title : Space Shuttle Main Engine (SSME) Phase B Final Report, 

Objective : The major objectives of the Rocketdyne study were 

to define the SSME requirements, establish engine design, and 
demonstrate the design feasibility. Supporting analyses and 
philosophies pertinent to the propulsion and avionics systems 
are included in the study „ 

Approach : Analyses and trade studies were performed to optimize 

engine design, A demonstration firing of the combustion system 
was conducted to establish the feasibility of the design approach. 

Discussion : The final report for the study was issued 23 June 

1971, Similar studies were conducted by Pratt and Whitney 
Aircraft, NAS8-26186 and the Aerojet Liquid Rocket Company, 
NASS-26188, The final reports for these two studies were not 
available for review. 

Several significant items applicable to the update of Contract 
NAS8-25619 were identified in the course of the review. These 
items as well as applicable recommendations are presented in 
summary form in Table II-l* 

Significance : The most significant area identified by the re- 

view is the subject of leak detection. It was found that satis- 
factory leakage detection techniques are not available for Space 
Shuttle application. Areas of concern are inflight hazardous 
gas detection, external system leakage and internal valve leak- 
age, It is recommended that these areas be given study priority. 



NAS 8-26187 REVIEW SUMMARY 
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D. REVIEWS OF TECHNOLOGY STUDIES 


1 . Contract NAS8-26378 (SCI Electronics. Inc.) 

Title : A Study of Multiplex Data Bus Techniques for the Space 

Shuttle. 

Study Objective : The specification of the optimum data bus 

system for the Space Shuttle. 

Scope of Review : This review has been limited to the Phase 

I Report dated May 17, 1971 and Volume I of the Phase II Report 
dated January 14, 1972. Volumes II, III, and IV of the Phase 

II Report, the Phase III Report, and the Final Report were not 
available at the time of this review. 

Study Approach : The approach outlined for this study is to 

specify a selected data bus system from a number of candidate 
designs. The selection is to be based on a series of individ- 
ual studies in which various concepts are evaluated against 
the Space Shuttle requirements. Six individual studies have 
been identified from which the design alternatives will be 
selected. The six studies are summarized in the following 
paragra phs. 

a. Requirements Identification and Analysis - The results of 
the Phase B system definition studies and NASA inputs are 
the major sources of requirements for the multiplexed data 
bus. Those requirements have been recorded on "Space 
Shuttle Data and Control Requirements Work Sheets" for 
use in subsequent requirements analysis. Computer punch 
cards have been made from the work sheets. The punch 
cards will be used as input data for computer routines 
from which a variety of listings can be made. Computer 
routines will be used to process and catalog input data 
to generate listings of data by: subsystem designation; 

vehicle location station; message classification; mission 
phase; signal redundancy level; control and display require- 
ments; and occurrence statistics of aperiodic data. The 
first listing to be generated accumulated the digital band- 
width required for each subsystem. The ultimate use of 
the listings will be to generate data flow models that 
describe the details of each message path between the 
avionics elements of the Space Shuttle vehicle. The data 
flow models in turn provide criteria on which candidate 
system configuration trade-offs can be made. The data 
flow models will show only normalized raw data flow; over- 
head cannot be included until a system configuration is 
selected . 
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The Phase B vehicle configurations and NASA inputs will 
also be used to generate physical and environmental models. 
The principal uses of the physical model will be to deter- 
mine the cable lengths between locations and the number of 
data terminals required. The environmental model will 
identify the temperature, vibration, and EMI levels that 
the data bus is expected to encounter. 

b. Transmission Media - During Phase I of the data bus study, 
a review of literature related to transmission media was 
conducted from which inferences were drawn on the suit- 
ability of particular media to the Space Shuttle data bus 
application. That exercise resulted in the reduction of 
the number of transmission media candidates to two. Wire 
cable was Identified as the prime candidate for the main 
data bus, while optical links may be considered for special 
purpose data links. During Phase II, emphasis was placed 
on laboratory investigations and tests. Tests were con- 
ducted to determine characteristics of a number of wire 
cable candidates, to study operational modes, to select 
design techniques, to assess EMI impact, and to assess 
other environmental factors. The final selection was not 
identified for the transmission media; however, emphasis 
on wire cable is continuing. Final solutions to the 
operating mode questions have not been reached; however, 
bounds were identified for most questions. Conclusions 
reached in the selection of design techniques were: 

- Transformers are the recommended coupling technique. 

- Cable nonuniformities, or those caused by connectors, 
are not a significant factor in the transmission of 
data over the Shuttle data bus. 

- It does not appear that filtering, equalization, pre- 
distortion, or inductive loading are necessary to 
achieve the desired signal characteristics in the 
Shuttle data bus . 

The most probable sources of EMI to the data bus were identi- 
fied, the waveforms of impulsive sources were characterized, 
cable arrangements were evaluated, and the probable effects 
of EMI on the data bus were evaluated during Phase II. 

It was concluded from the results of these evaluations that: 

- Low pass filtering at the receiver may be an effective 
method of reducing the magnitude of transient inter- 
ference . 
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- Neither radiated interference nor susceptibility 
present a problem to the operation of a data bus 
system of the nature envisaged for the Space Shuttle 
vehicle . 

- It does not appear necessary to filter the trans- 
mitted data bus signals as a means of reducing 
radiated interference levels. 

Environmental tests led to the conclusions that: 

- Added loss incurred at high temperature must be 
accounted for in the data bus design. 

- Changes in characteristic impedance and phase shift 
with temperature may be ignored when a fluorocarbon 
insulation is used . 

The final selection of the transmission medium will be made 
from the media candidates and the implementation methods 
considering length, number of data terminals, bit rate, 
environment, cost, reliability, availability, etc. 

c. Signal Design and Detection - Preliminary signal design and 
detection studies during Phase I led to the conclusion that 
time division multiplexing should be the primary multiplexing 
technique used in the data bus. It was further concluded 
that digital transmission is the preferred mode of bus oper- 
ation, that audio and video signals should not be handled by 
the data bus, and that baseband signaling methods should be 
emphasized over carrier schemes. The Phase I efforts in this 
area also led to the following results: 

- The number of baseband modulation techniques for 
further study was reduced to seven. 

- Emphasis will be placed on block coding over con- 
volutional coding in subsequent evaluations of 
redundant coding for error control. Elaborate 
coding for error control does not appear suitable 
for use on the data bus. 

d. Synchronization. Timing and Control - Six major functional 

categories are identified that comprise the system operation 
of synchronization, timing and control, namely: timing and 

synchronization; bus access control; message routing; func- 
tion and message identification; programming; and channeling 
arrangements . 
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A tradeoff between centralized and distributed timing has 
been identified. 

Bus access control using time reference, command- response, 
handover, and contention techniques are discussed. It has 
been decided to emphasize the command- response technique 
during the remainder of the study due to the data flow re- 
quirements of the Shuttle and the design approach under 
cons idera t ion . 

Five alternatives are presented for the control of message 
routing under the classifications of centralized and dis- 
tributed control. The final selection will be made when 
more definitive data flow requirements have been reached; 
i.e., the determination of how much of the data must be 
routed to destinations other than the central processor and 
how many data transfers require multiple destinations. 

Time- reference, function tags, and hybrid identification 
were considered as possible methods of function and message 
identification. The latter two are more applicable to the 
Shuttle and will be emphasized in the later study phases. 

A number of applicable alternatives were identified to meet 
the programming requirements. Overall vehicle software com- 
plexity, overall vehicle reliability, and data acquisition 
and distribution flexibility are key factors that will be 
considered during subsequent studies of the programming 
alternatives . 

Three 2 cable and two single cable channeling arrangements 
have been identified for distributing supervisory, synchroni- 
zation, message, and error control information over the data 
bus system. The merits of these arrangements will be assessed 
in Phase II . 

e. User Subsystem Interfaces - Studies were conducted during 
Phase I to identify the functions performed by the user sub- 
system interface and to identify candidate circuit elements 
to perform those functions. The electronic operations that 
must be performed (collection, conversion, formatting, de- 
coding, etc.) and the transfer modes that exist between the 
data bus subsystem and the user subsystem depend primarily 
on the subsystem I/O requirements and whether or not the 
user subsystems possess some or all of the necessary functional 
capability (such as in an engine controller). A number of 



implementation candidates have been identified and will be 
evaluated pending the definition of the subsystem I/O 
characteristics from the data flow listings. The identifi- 
cation of several data terminal configurations is planned. 
They will assume differing channel capacities and mixes of 
data types. Standardization of data terminals and packaging 
will be given consideration in subsequent studies. 

Operational Reliability - Phase I studies of operational 
reliability addressed: 

1) Reliability Criteria 

Failure tolerance criteria 

- Statistical reliability criteria 

2) Application of Redundancy 

Standby redundancy 

- Masking redundancy 

3) Design Alternatives for Operational Reliability 

- Protection against interference 

- Staggering 

- Voting 

- Channel switching with parity test 

- Redundant coding 

4) Failure Detection 

5) Interfacing of Redundant Subsystems 

6) Redundant Clock Sources 

7) Power Distribution 

8) Status Monitoring and Test 

- Requirements 

- Built-in test concepts 
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9) Maintainability 

- Built-in test 

- Test points 

- Modular construction 

- Mechanical 

- Environmental 
Standardization 

It was concluded that a number of functions may be required 
of the data bus system. 

Staggering and destaggering for protection against 
Interference . 

Automatic error correction and failure masking. 

Fault detection* 

Fault reporting. 

- Reconfiguration based on failure detection* 

Interfacing with subsystems having different levels 
of redundancy* 

The evaluation of the effectiveness and complexity of the 
various techniques and the synthesis of candidate networks 
capable of satisfying the functional operational reliability 
requirements have been identified among the Phase II tasks. 

Significance to The Propulsion System Checkout and Monitoring 
Function : In general, the specific implementation of the data 

bus subsystem will have little impact on the propulsion system 
checkout and monitoring function as sinning that all of the pro- 
pulsion OCMF requirements have been accommodated. The principal 
. areas of concern are the accommodation of the expected data rate 
requirements, the action and reaction times required for propul- 
sion system operation and crew safety, the reliability of the 
data bus to contribute its part to the execution of critical 
propulsion functions and to preclude the erroneous execution 
of propulsion functions, and the flexibility to accommodate 
changes in requirements * 
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Table II-4 summarizes the areas of mutual interest between 
basic NAS8-25619 and NAS8-26378. It should be recognized 
that the differences in scope and objectives of the two 
studies are diverse. The data bus subsystem proposed by basic 
NAS8-25619 was part of a design reference model data management 
system that was a feasible candidate to implement the propulsion 
system OCMF requirements that had been identified by approaches 
developed previously in the study. The data bus subsystem that 
will be specified by NAS8-26378 is intended to be an optimum 
configuration based on the requirements of all vehicle systems 
as defined by NASA and the results of the Phase B definition 
studies. Therefore, while Table II-4 lists a number of areas 
of mutual interest, our main focus is in the area of data bus 
requirements due to the propulsion system OCMF (includes con- 
trol). It should also be noted that the Data and Control Re- 
quirements Listing as presented in Appendix B of the Phase I 
report of NAS8-26378 is the first listing of these requirements 
and is believed to be preliminary in nature. 

The areas related to the data bus in which improvements are 
recommended to update basic Contract NAS8-25619 are: (See 
Table II- 4) 

a. An improved data presentation method; 

b. A reconsideration of the number of SSME para- 
meters that should be transmitted over the 
data bus; 

c. The use of a two cable channeling arrangement. 

In addition, significant areas in which detailed analyses were 
not done by basic Contract NAS8-25619 but must be fully analyzed 
in a data bus design are: 

a. Environment; 

b. Statistical reliability; 

c. Redundancy. 



TABLE 11-4 

SUMMARY OF NASB-26378 REVIEW 
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ITEM 

MASS -2 56 19 (MC) 

NASS- 26378 (SCI) 

SIGN inCANCE /RECOMMENDATION 

1* OBJECTIVE 

Develop And implement apptoacties for the 
definition And implementation cf the 
Space shuttle propulsion system check- 
out and monitoring functional require- 
ments* 

Specify the optimum data hue system for 
the Spac* Shuttle vehicle* 


2* SCOPE 

Limited to operational phase propulsion 
system requirements. 

DasLgn baaed on requirements of ell 

vehicle Subsystems* 


3. DATA 4 CONTROL REQUIRE- 
MENT'S SOURCE 

Analysis of baseline propulsion system 
checkout and monitoring functional 
requirement a for all mission phases* 

Phase B Space Shuttle definition study 
results and NASA Inputs* 


4* BASIS FOR SELECTION OF 
DATA BUS SUBSYSTEM 

Propul Aim ays tent requirements and past 
experience with onboard checkout sys- 
terns . 

Evaluation of the results of six Indi- 
vldual studies in which the vehicle data 
and control requirements are ana ly ted 
and candidate designs are evaluated. 

NASS-26376 data bos design is likely re be better 
suited to the entire vehicle since the requirements 
of all vehicle subsystems will be analysed* 


5* DATA A CONTROL REQUIRE- 
MENTS PRESENTATION 
METHOD 

OCHS Measurement Requirements List 
Subsystem 
Identity Cod* 

Quantity 
Range and Units 
Allowable Error 
Response Rate 

Mounting 1 

Fluid Medie 
Measurement Type 
Data Use 

Time of Data Activity 

Sample Race 

Data Rate 

DIU Number 

Remarks 

j 

Data 6 Control Requirements Listing 

Designation 
SLgnal Name 

Classification; Destinations 
Hi as ion Phase 
Minimum Samp lea /Second 

Location Station 

Remarks 

Redundancy 

Minimum Bits/Vord 

Card Type, Number, and Revision 

It is clear that th# differences in the presentation 
methods te primarily a result of the different uses 
for which the listings ver* intended* It is sugges- 
ted that the bast of both methods might bt merged to 
create a listing that would serve the purposes of 
most users * It is recognized that punch card space 
limitations are s constraint on the amount of infor- 
mation that esn be packed into on* listing. The 
recoone tided listing and rationale follows: 

(a) Designation; sufficiently idsnrffies th* sub- 
system, assembly, and signal number, (b) the use of 
both identity codes and signal names to clearly 
identify the signal* (c) Rang*, units, and allowable 
error; basis for censor selection, bits /word, and 
system error budgets, (d) Response rate; basis for 
sang? la rate and system speed requirements, (e) 
Classification; identify signal type, (f) Data use i 
6 destination; Identification of where the signal is 
going and for what reason (include) middle column 
of existing classification column), (g) Mission phase 
(h) Time of data activity; identify event, condition, 
interval for which data has significance, (i) Maxi- 
mum bits/ word, (j) Maximum sample rate, (R) Location/ 
terminal, <l) Criticality/redundancy, (m) Remarks, 

(n) Card mounting and fluid media are more properly 
listed on senaor criteria or specification sh**ts. 
Title and date info should be provided on each sheot 
of the listing* Onboard Signal List is suggested as 
a candidate for the title of the listing which should 
include both measurement (monitor) signals and com- 
mand (control) signals. 

6* a) BOOSTER MAIN ENGINE 



Rockatuyne indicates that 74 engine parameters ' 

MEASUREMENTS (not 
Including redundancy) 

91/Eng in* 

59/ Engine 

result in 10£ engine controller inputs, of which 4? 
are sent over th* data bus for recording* 

b) BOOSTER hain engine 

9*1$4 KBPS (Start) 

11*42$ KBPS 

The higher NAS6-26387 raw data rates are du# to 

RAW MEASUREMENT DATA 
RATES/ENG1ME 

4*446 KBPS (Steady -State) 
8*192 RBFS (Shutdown) 


higher transfer rates (not sample rates)* 

c) BOOSTER MAIN ENGINE 

11*640 OPS (Start) 


Raw data rates have little significance to data bus 

TOTAL RAW DATA 

6,902 KBPS (Steady- State) 


sizing* Overhead and comaatid data must be accounted 

(includes commands 
and discretes) 

10*440 OPS (Shutdown) 


for te determine the peak data rates. NA5$- 26378 
will do so when a configuration and Che operating 

d) BOOSTER MAIN ENGINE 

30*5 KEFS (Start) 


modes have been selected. 

DATA RATE PEAK 
INCLUDING DATA BUS 
OVERHEAD 




7* DESTINATIONS OF MAIN 
ENGINE DATA 

Recorder, Displays, Central Computer 

Recorder 

ALL SEME data destinations should be accounted for 
by the data bua study. 

8, A IRB REA THING ENGINE 

41 /Eng in* 

3 7 /Engine 


MEASUREMENTS 




9* SUBSYSTEM INTERFACE 

25 DlUs (Orbiter Propulsion System) 

20 to 100 Data Terminals (DT) per bus. 

■■a 'T^ |T' r-T '■ liH 1 1 tW".l IWUnHi Hi ll-ll 1 

UNITS 

57 DIUs (Booster Propulsion System) 


timlaHM 

10. DATA BUS 




a) Transmission Medium 

TVi S ted -shl* lded wire cable based cm 
past experience. 

Hire cable for main bus; possibly op- 
. tlcal link for special purpose links* 


b) Coupling Technique 

Transformer 

Transformer 


c) bit Rate 

1 megabit bus assumed fet a peak pro- 
pulsion data rate of 430 KBPS. 

Considering frequencies as high ns 
10 MHz* 


d) Environment 

Not defined. 

Temperature at least JOO^F assumed. 
Bus assumed to be in pmeu switching 
environment * 

Temperature (high 6 low), vibration, humidity, EMI, 
etc* must be accounted for in final data bus design. 

e) Media Operational 
Mode 

Not specified; have had good success 
with matched/ loaded buses. 

TBD 


f> Cur rtnt/vol cage 

Not specified; used voltage in past. 

TED 


Operation 




g) Multiplexing Tech- 
nique 

Time division 

Time division 


h) Transmission Tech- 

Digital 

; Digital 


nique 




i) Modulation Technique 

Baseband (biphase) 

| Baseband (considering several) 

i 

j) Redundant Coding far 
Error Control 

1 dimensional parity and echo checki. 

Emphasizing parity checks and repeti- 
tion codes* 


k) Message Formats 

9 bit bytes; 8 bits data, l hit parity* 

CoBAndS; I address byte 

1 function code byte 
0-7 data bytes 
l parity byte 

Responses; 1 address byte 
D-32 data byte a 
1 parity byte 

TBD 


1) Timing A Synchroniza- 

Central timing; **lf-c locking 

| TBD 


tion 
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TABLE 11-4 (Concluded} 
SUMMARY OF NAS8-26378 REVIEW 


ITBN 


MA£fi*25bl9 (MMC> 


NAS8-2b37e (SCI) 


SlGMPICA HC E/RBOOrtfEHDATlOH 


m) But Access Control 

Central control on a cotmend- response 
basis with flexible programming. 

Leaning toward command- response approach 


a) Message Routing 

All transmissions occur to or from the 
central computer complex* 

TDD 


p) Function ft Heefiflge 
I.D. 

Function tags centrally supplied 

Function tags or a hybrid technique* 


p) Channeling 

Single cable, half-duplex where aupsr- 
visory info and message info fro* the 
central computer are sent to remote 
units* Responses follow over the sane 
cable* 

Considering 5 alternatives* 

Recomseod that a two cable arrangament be used 
where supervisory info, sync info, and messages 
sent from the central computer ate flsnt on one 
cable with response data sent to the central 
computer over the second cable, this would double 
the capacity, simplify the receive r /transmit ter 
circuits and increase the flexibility of tha 
HASS* 2*6 19 base Line system. 

q) Failure Tolerance 
Criteria 

FO/FO/FS for transmission media. 
Variable for remote terminals depending 
on subsystem redundancy and function 
criticality* Ho single potnt failures* 

Considering; No aignle point Cel lure a; 
FSj F0/P5: end FO/FO/FS as possible 
criteria for the data bus subsystem 
elements. 


r) Statistical Reliabil- 
ity 

No addressed. 

Will be determined* 

Must be estimated in addition to failure tolerance 
criteria to ensure desired reliability. 

«) Redundancy 

Specified standby redundancy * 

Considering standby, masking, or some 
blend of the two. 

Tha use of standby redundancy should be carefully 
•ve Lusted in view of the potential time delays 
! in getting the system reconfigured after a fall* 

■ ura. Reconfiguration time must be short compared 
, to the reaction time requirements of emergency 
: conditions. 

t) Protection Against 
Interference 

Redundant coding; 2 dimensional parity 
and echo checks of compands. 

Considering: staggering; various voter 

schemes; channel switching with parity 
test; redundant coding. 

I 

u> Status Monitoring & 
Test 

Cent rallied monitor end control using 
parity checks, faulty response, no 
response, redundant transmission, an d 
self-check methods. 

Considering centralized and distributed 
monitor and control* 


v) Maintainability 

Modular construction of 5 basic type* 
of DIUs for the orb Iter propulsion sys- 
tem, all with self-check capability. 

Should consider: built-in tost, teat 

points, modular construction, ease of 
installation, environmental aspects, 
and standard list ion* 

The consideration of test points cannot be over* 
emphasised , 
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2, Contract NAS9-1133 0 (Lockheed Missiles and Space Co.) 

Title: Space Shuttle Cryogenic Supply System Optimization Study. 

Objective : Provide sufficient information and recommendations 

to allow NASA to select the Space Shuttle orb iter cryogenic supply 
system. 

Study Status : At the time of the review, a draft of the interim 

report had been published and the interim presentation had been 
given. Work was continuing on the math model. 


Approach : The approach taken was to select representative subsystems 

to supply cryogenics for the main, orbital maneuvering and attitude 
control propulsion subsystems, and the environmental control, auxiliary 
power and fuel cell subsystems; and to define purge and inerting sub- 
systems* The next step was to analyze these selected subsystems, 
define their operating parameters and components, and develop a 
math model to aid in development of cryogenic subsystems. 

Program Summary : The basic requirements and criteria for the 

cryogenic subsystems were obtained from the main engine and Phase 
B Shuttle studies. From these studies, propellant quantities, flow 
rates, pressures, mixture ratios, life, duty cycles, etc., were 
defined* To formulate the candidate subsystems for evaluation, the 
subsystems were divided into their main functions which were again 
divided into increasing detail to provide all possible subsystem 
compositions. Various options for each function were considered 
and presented* For each defined function, favorable and unfavorable 
factors were listed* Candidate systems were formed by picking 
functions from the various options and eliminating those functions 
with unfavorable factors from further evaluation. 

These candidate systems were then analyzed and when applicable, 
methods or components were compared, and the favorable and/or 
unfavorable factors presented. The specific comparisons or 
analyses are too numerous to list completely, but as an example 
the following list is presented: 

* Compare electrical pumps and turbopumps for the auxiliary power 
unit * 

Dual or cascaded propellant tanks for the orbital maneuvering 
subsystem. 


Use of start tanks. 



, Effects of insulation thickness. 


. Location of pumps. 

. Types of insulation. 

, Comparative weights. 

Prom these studies, Lockheed supplied Air Research with schematics 
on candidate subsystems for the various subsystems anticipated for 
use on the Shuttle orbiter. Received by Air Research were 
schematics on the following subsystems: environmental control, 

fuel cell supply, auxiliary power, main propulsion, orbital maneu- 
vering, attitude control and purge system. Also received were 
duty cycles, size, flow rates and fluid conditions. The major 
areas of effort for Air Research were: component recommendations, 

malfunction examination and development of parametric data with 
major emphasis placed on valves, heat exchanges, pumps and instru- 
mentation. 

The component recommendations were related to existing components 
which would best satisfy Lockheed's input data. Where the recom- 
mended component would not meet all the requirements, the necessity 
for modifications or new technology was noted. In each component 
identified, a malfunction examination was performed. Criticality 
of the component was assessed from the effects of its failure on 
the system and its failure rate. The failure rates used were 
Apollo failure rates, estimates based on the Apollo failure rates 
or were calculated from similar equipment. The failure modes and 
effects were derived from experience since most of the components 
recommended were made by Air Research. The schematics given were 
"single string" only, meaning no redundancy was considered. Air 
Research's component malfunction analysis also made recommendations 
where redundancy should be considered. 

Parametric data was presented on each of the recommended components. 
This consisted of size, weight, power requirements, pressures, 
temperature, weight flow, effective flow area, etc. 

Heat exchangers and pumps are designed for specific systems, there- 
fore, "off-the-shelf" components could not he recommended. However, 
to aid in selecting these items, parametric data was derived by 
varying inlet conditions, flow rates, etc. and showing it in graphic 
form so that weight, size, efficiency, power requirements, speed, 
etc., could be determined depending on system requirements. 
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The primary ase for instrumentation considered in Air Research *s 
study was for control purpose s* no instrumentation was recommended 
for monitoring or checkout* No parametric data for instrumentation 
was presented per Lockheed's directive; however* malfunction data 
was presented (function* failure rate* failure type* effect and 
recommendations for redundancy ) * 

OCMF I mpac t: Onboard checkout and monitoring per se was not 

considered in the cryogenic supply system optimization study 
documentation that was reviewed* Instrumentation components 
(pressure transducers /switches* temperature pickups) considered 
in this report were for control purposes only; specifically for 
control of regulating methods* i 0 e 0 * heaters* fans* pressure 
regulating* etc* 

However* some new technology areas were defined for instrumental 
tioru These areas were identified while recommending components 
for use in the subsystems being evaluated* Areas in which existing 
instrumentation did not meet the specific requirements defined in 
this study are: 

a* Pressure switches needed life time improvement for cryogenic 
applications* 

b* Pressure transducers that can function immersed in liquid 
hydrogen* These are required for monitoring the integrated 
cryogenic systems without liquid orientation. 

c* Leakage detection devices are needed to detect gas losses 
and safety hazards* 

d.- Temperature sensors and control logic needs development for 
controlling venting by sensing liquid temperature* 

Although onboard checkout and monitoring requirements were not 
included in the documentation reviewed 3 no new requirements for 
the OCMF were identified by the proposed cryogenic subsystems 
that were not considered in the basic OCMF study* 
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3 . Contracts NAS10-7145 and -7788 (General Electric) 


Title : Study of Techniques for Automatic Self-Contained Read- 

iness Assessment 6c Fault Isolation for Ground and On-board 
Mechanical Systems . 

Objective : The objective of the basic study (Contract NAS10- 

7145) was to provide direction for achieving technology by 
which mechanical devices 1 performance parameters can automatically, 
and in real time* be determined and evaluated. The objective of 
Contract NAS10-7788* which is a follow-on to the basic* is to 
evaluate the feasibility of structure-borne acoustic techniques 
for readiness assessment and performance monitoring of mechanical 
systems. 

Status : The basic study has been completed* The effort on the 

follow-on program was initiated in October* 1971* 

APPROACH : A representative sample of mechanical devices were 

selected for study from Saturn V Launch Complex 39 flight and 
ground systems* The sample consisted of 36 devices which were 
subjected to detailed analysis to establish functional para- 
meters necessary for readiness assessments and to determine 
methods for achieving these capabilities. Each of the 36 devices 
was analyzed to verify the functional parameters which must be 
monitored to ascertain whether the device is in a Go, No-Go* or 
Caution status. The analysis consisted of identifying the devices' 
failure modes* the basic parameters that could detect each failure 
mode, and the parameter boundaries which define its status. Seven- 
teen separate requirement parameters were identified for the 36 
components. Each of the mechanical devices typically possess from 
4 to 10 of these parameters which must be evaluated to achieve 
total readiness assessment capability. Each of the parameters 
were compared to non-destructive test techniques. (As part of 
the study, ninety non-destructive test techniques were identified 
and categorized according to their adaptability to the mechanical 
systems readiness assessment function.) Eighteen existing non- 
destructive test techniques were applicable to the 36 components* 
Parameters that were not amenable to existing techniques were 
structural stress* surface smoothness, lubricity* certain distance 
and force measurements* and leakage. Potentially adaptable tech- 
niques recommended for further evaluations were grouped in the 
following categories: 

* Acoustic non-destructive testing 

. Infrared Radiometry 
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, Optical Interferometry 
* Ultrasonic Imaging 

The effort under the follow-on program is comprised of an 
evaluation of the applicability of structure borne acoustics. 

In task I* three different types of mechanical components 
were selected from the Saturn V spare parts inventory; a 
solenoid valve* a regulators and an air motor. These com- 
ponents were analyzed to define failure mechanisms* failure 
modes* and operational effects. Acoustic signature predic- 
tions were derived for each component by the formulation of 
an acoustical model. Detailed acoustic test plans were then 
generated. Task II is comprised of conducting acoustic tests 
on the selected components, evaluating the acoustic test data* 
and comparing the predicted signatures with the actual signa- 
tures, A minimum of three tests will be conducted on each of 
the components under varying operating conditions. Signatures 
of induced failure modes will be evaluated against a baseline 
and the analytical model. The primary output of Task III will 
be a general Structure Borne Acoustic Methodology Handbook, 

This handbook is intended as a reference manual for system 
designers , 

Significance of Results : It was concluded from the basic study 

that existing hardware was not configured for real-time, self- 
contained status assessment; however* future mechanical devices 
could be so configured. To implement readiness assessment a 
balanced program of studies and development programs were recom- 
mended to provide the optimum method of achieving this goal. 

The recommendations generally consisted of software and hardware 
development to expand the area in which existing technology is 
not available for readiness assessments. 

The structure borne acoustics evaluation that is being conducted 
under the follow-on program had not progressed to the stage where 
the applicability of the technique to the propulsion systems on- 
board checkout and monitoring function could adequately be assessed. 
However, the technique has been shown to have potential applications 
for fault detection and for acquisition of trend data. 
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4. Contract NAS10-7291 (Pearce and Associates; Dynamatec Corn.) 

Title : Study to Develop Improved Methods to Detect Leakage In 

Fluid Systems. 

The Dynamatec Corporation study consists of three phases. This 
review covers the first two phases which have both been completed* 
Data on the Phase III work has not yet been received. A summa- 
tion of the first two phases of the study are presented in Table 
II-4 and II-5. 

The objective of Phase I was to develop a faster and more re- 
liable method to detect tank and system leakage. A method was 
to be developed which would lend itself to onboard checkout and 
monitoring of Space Shuttle systems* This was to be accomplished 
by updating present leak detection techniques or by designing a 
new system. The recommendations presented at completion of Phase 
I led to the initiation of Phase II* 

The objective of Phase II was to design and fabricate a proto- 
type ultrasonic contact sensor leak detector and demonstrate 
its operation during cryogenic operations at KSC* 

The objective of Phase III is to develop flight weight electronics 
for use with the contact sensors developed in Phase II* 

Conclusion ; The findings of NAS10-7291 do not alter the basic 
conclusions of NAS8-25619, Acoustic /ultrasonic techniques 
appear to hold promise for leakage detection, and should be 
considered in the development of a detector system for internal 
and external leak detection. Emphasis should be placed on estab- 
lishing the requisite leakage signatures. 



PEARCE PHASE I SUMMARY 
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PEARCE PHASE II SUMMARY 
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5 * Contract NAS10-7258 (Martin Marietta Corporation) 

Title : Propellants and Gases Handling in Support of Space 

Shuttle - Cryogenic Propellant Loading; Purging LH Systems; 

LOX Geyser Suppression; Propellant Tank Level Sensing* 

Objective : The objective of this study on Space Shuttle cryo- 

genic propellants was to: 

a* Define modifications to the Saturn V launch facility pro- 
pellant storage and transfer equipment for Space Shuttle. 

b* Define techniques for reducing quantities of helium purge 
gas * 

c. Evaluate the feed system design approaches for geysering 
suppression . 

d. Define improved propellant level sensors and quantity gaging 
systems , 

Study Status : The study is complete and the final report was 

published June 1971. A follow-on study (Contract NAS10-7613) 
was performed to evaluate geyser suppression techniques. The 
final report was in draft form at the time of this review. 

Approach Of The Review : The major emphasis of the review was 

placed on the propellant level sensing methods presented* the 
recommendations made and any effects on onboard checkout con- 
cepts * 

Report Conclusions ; For propellant handling the Saturn V cryo- 
genic loading systems can be modified to provide the increased 
loading demands of the Space Shuttle vehicle. Ho difficulties 
are expected from the modification since the hardware needed 
is presently available and no new technology is necessary. The 
costs of the modifications will depend on the loading time 
selected* The minimum loading was about one hour and costs 
approximately 370% more than the minimum cost method which took 
about three hours for propellant loading* 

The cost of purging can be greatly reduced by using a two-gas 
system* It was recommended that by used until the systems 
are prepared for admission of LH ? at which time GH should be 
used. 2 



Concentric suction lines were the recommended technique for 
geyser suppression. This method is self-starting, self-regula- 
ting and is not dependent on other active systems, such as pumps. 
Tests performed under this contract were on straight vertical 
lines only, and it was recommended that the suitability of this 
method be demonstrated on more complex line configurations. The 
previously mentioned follow-on did test this technique on sim- 
ulated Space Shuttle propellant lines and found it to be a viable 
technique . 

The gaging sensors and systems discussed in this study are sum- 
marized in Table II-7 . The gaging and sensors recommended for 
the Space Shuttle are presented in Table II- 8. Also recommended 
was the use of digital solid state electronics for the capacitance 
probe systems which would reduce the weight from 50 pounds for 
the Saturn type to about 14 pounds. 

Review Observations : No problems are foreseen in integrating 

the gaging systems with onboard checkout and monitoring. Cap- 
acitance probes and point sensors are used on Apollo to provide 
the crew with propellant quantity readings while the engine (SPS) 
is operating (propellants are oriented). Problems have been en- 
countered with the capacitance gaging systems both in the booster 
and the SPS. Contamination and electrical problems have occurred, 
and the systems have flown inoperable on some missions. 

The zero-g methods proposed are not operational and need con- 
siderable development. Any potential requirement for a zero-g gaging 
system should be weighed against the cost, complexity, accuracy, 
and reliability of such a system before requiring zero-g gaging 
for the Space Shuttle. Inventory-keeping, needing no technology 
advancement, may prove to be the optimum system and should def- 
initely be considered. With onboard monitoring and the use of 
the flight computer an inventory-keeping system should not pre- 
sent any major implementation problems. This technique can be 
applied to all propellants. The recommended systems and others 
listed in Table II-S have limitations as to which propellant 
(LH 2 or LO 2 ) that they can be used with, meaning that two systems 
may have to be developed, further increasing the costs. 



PROPELLANT GAGING SUMMARY 
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E* ADDITIONAL INVESTIGATIONS 


1 , Be aring Incipient Fa ilure Detection : It was reported in the 

final report (Vol. Ill, pages HI-32, 33) of our basic study 
that incipient bearing failure detection was one of the identi- 
fied requirements that was not readily met by the application 
of existing sensors or developed sensor concepts with onboard 
equipment. It went on to report that Pratt and Whitney had 
obtained good results with ultrasonic range accelerometers on 
turbofan engine bearings and had success with bearing vibration 
analysis during the RL10 rocket engine development. Other 
references that were mentioned contained reports on engine 
vibration monitoring with piezoelectric vibration transducers 
on the Boeing 747 and finally the acoustic emission studies 
of H* L, Balderston of the Boeing Company for the detection 
of incipient failures in structures and various subsystems. 

Since the effects of certain Space Shuttle bearing failures 
are potentially catastrophic and no known advancement has been 
made that would preclude bearing failures during a Shuttle 
mission, we have continued to pursue the subject of incipient 
bearing failure detection and malfunction detection during 
this study extension. We have made personal contact with SKF 
Industries, Inc. and the General Electric Company, both of 
whom have developed bearing failure detection equipment. 

In our visits with SKF and GE, we provided each with the back- 
ground of this study, the principal Shuttle applications where 
incipient bearing failure detection is required, and the rela- 
tionship of incipient bearing failure detection to onboard 
checkout and monitoring. In preparation for these visits, 
we consulted Rocketdyne on the bearing characteristics of 
their SSME turbopumps since this is an area of particular 
interest. 

Our visits with GE and SKF have convinced us that each of them 
has developed valuable techniques that have been sufficiently 
proven in a wide range of applications to warrant development 
for the Space Shuttle propulsion system application. Both 
techniques have been developed from an understanding of the 
failure mechanisms of rolling bearings and the resulting 
signatures. Spalling due to metal fatigue on the bearing 
surfaces result in the generation and transmission of energy 
impulses (narrow, high amplitude pulses) when a rolling element 
comes In contact with the damaged area. This fact has led to 



the development of equipment to detect these energy impulses 
while ignoring other inputs. It eliminates the necessity to 
attempt exotic analyses of complex vibration waveforms and 
precludes the necessity for extensive testing of acceptable 
and damaged bearings to identify signatures of damaged bear- 
ings. Both techniques use piezoelectric accelerometers for 
the sensing elements. The accelerometer outputs are fed to 
signal conditioners where undesired signals are "filtered" 
out and the health of the bearing is assessed by evaluating 
the rate and amplitude of the remaining pulses. The differ- 
ences in the respective techniques Is in the signal condition- 
ing equipment. In addition to detecting fatigue damage on 
the rolling elements, these techniques are capable of detecting 
lubricant impurities and cage damage. The GE device has also 
been used to detect out-of-round balls and incorrect loading. 

On the basis of the GE and SKF information, it is our conclusion 
and recommendation that the primary areas requiring development 
are: (1) the extension of present detection techniques to 

bearings operating at cryogenic temperatures, (2) the develop- 
ment of these techniques for 2-3 inch bearings operating at 
varying speeds up to 40,000 rpm, and (3) the development of 
the capability to predict the minimum remaining useful life 
from the time that an anomaly is first detected. In conjunc- 
tion with these efforts, it Is recommended that optimum sensor 
mounting criteria (considering physical environment and detec- 
tor sensitivity), self-check techniques, sampling rate and 
signal conditioner sharing criteria, and display and recording 
criteria be developed for the specific Space Shuttle applica- 
tions. It is further recommended that appropriate emphasis 
be placed on failure prevention to limit the need for incipient 
bearing failure detection capability to only those areas of 
highest criticality. 

In addition, a limited literature search has identified a 
number of other manufacturers of vibration and vibration /shock 
measuring equipment. This search was made to identify suppliers 
of complete units or systems rather than sensors as was the 
case in the vendor survey in our basic study. Table II-9 
lists the other manufacturers identified and the type of equipment 
that they supply. Most of the equipment of these manufacturers 
is designed for low speed, non-critical , industrial use and is 
not likely to have much applicability to the Space Shuttle. 
However, an exploration of these sources, shown on the table. 
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as well as Pratt & Whitney would be advisable in further 
pursuit of solutions to the bearing incipient failure 
detection and malfunction detection problems for the Shuttle* 

The technical information supplied by Mr, K 0 Smith of the 
General Electric Company and Messrs* P. Howard* L* Sibley* 
and T. Tallian of SKF Industries was a significant contribu- 
tion to this technology review and is gratefully acknowledged. 
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TABLE II-9 

MANUFACTURERS OF VIBRATION & SHOCK 
MEASURING EQUIPMENT* 


MANUFACTURER 


AGAC - Derritron, Inc. 
Alexandria , Virginia 


| Be 1 1 & Howell Co. 
j CEC/Transducer Div. 
Monrovia , California 


Boeing Co. 
Houston, Texas 


Columbia Research Labs 
Raytheon Company 
Sudbury, Massachusettes 


General Radio Co. 


Gulton Industries, Inc. 
Servonic Instruments Div. 
Metuchen, New Jersey 


Hanchett Mfg. Co. 
Raydyne Div. 

Big Rapids, Michigan 


Indikon Company, Inc. 
Watertown, Massachusetts 


International Res. & Dev. Corp. 
Subsid. of H. H. Robertson Co. 
Worthington, Ohio 


Korfund Dynamics Corp. 
Instruments & Acoustics Div. 
Westbury, L. I., New York 


Mechanical Technology, Inc. 
Instruments Div. 

Latham, New York 


Reliance Electric Co. 


Robertshaw Controls Co. 
Aeronautical & Instrument Div, 


Southfield Electronics Div. 
Comte 1 Corporation 


TYPE OF EQUIPMENT 


VIBRATION 


X 


*In addition to GE and SKF 
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2* Leak Detection 


The basic study identified a candidate approach for incorpora- 
ting leak detection into onboard checkout and monitoring of 
the Space Shuttle propulsion systems. However* the s t tudy also 
identified leak detection as requiring further technology 
efforts. To supplement the work conducted in the basic study 
and in the related studies* further work was conducted in 
surveying and cataloging potential leak detection techniques. 

The approach and results of this additional activity are pre- 
sented herein* 

Approach : The approach consisted of establishing a leakage 

criteria baseline to enable evaluating the applicability of 
various leakage detection techniques; conducting a survey and 
evaluation of proven and potentially feasible leak detection 
methods and approaches; and identifying general leakage sources 
and time phases, and matching to them candidate leakage de- 
tection methods* 

* Generation of leakage criteria * Leakage criteria data were 
obtained for a launch vehicle (Titan III) and a spacecraft 
(Apollo CSM) . The information was categorized and, where 
possible, converted to cubic centimeters per second leakage 
rates. It was determined that the Space Shuttle Propulsion 
System leakage would fall within the ranges of the Titan- 
Apollo criteria. Rough order of magnitude leakage rates 
were then assigned to component groupings and conditions. 

The criteria are summarized in Table 11-10, 

. Survey of leakage detection methods and approaches . A survey 
of industry, government and scientific sources was conducted 
to define and determine the status of existing and future 
leak detection technology. A tabulation of sources of in- 
formation is presented in Table II- 11* Recommendations that 
update the basic study results are based on the information 
obtained in the survey. 

Evaluation of leakage sources and detection methods . Leak- 
age sources and conditions were categorized and applied to 
identified operational time phases. Leakage detection methods 
were also treated in the same manner. Techniques for detec- 
tion of specific leakages were recommended on the basis of 
applicability, availability, and technology status . Where 
possible a set of three recommendations were made consisting 
of a preferred state-of-the-art technique, an alternate 
method, and a technique that potentially would best suit 
the application but would require a significant development 
effort* Results of the evaluation are presented in Table 
II- 12, 
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The following ground rules were used in this Investigation; 

* Leak checks would not normally be conducted during the 
vehicle flight preparation operations. However, the leakage 
detection recommendations defined for maintenance retest 
operations would be applicable should leak checks be re- 
quired for normal flight preparations. 

* The orbiter was used as a baseline vehicle for leakage de- 
tection requirements and approaches* 

. Portions of the orbiter propulsion systems are isolated by 
compartments that are capable of being purged with inert gas 
during conditions that could constitute a fire hazard* 

. The vehicle compartments are vented to space during orbital 
operations* 

* The main propulsion system propellants are liquid oxygen and 
hydrogen. Hypergolic propellants such as MMH and N 2 O 4 could 

be used by the orbital maneuvering and attitude control systems. 

Discussion: The leak detection technology evaluation indicated 

that there is no single detection method or instrument that 
fully satisfies the Space Shuttle leakage detection requirements* 

In fact, a good deal of development work is necessary to have an 
onboard checkout and monitoring capability sufficient to preclude 
tedious ground leak check operation. It is our conclusion, how- 
ever, that with proper design planning, adequate methods can be 
devised to minimize laborious ground leak checks. To attain this 
goal, the following recommendations are presented: 

a. Propellant and gas lines approximately two inches in diameter 
and larger should utilize a dual seal flange with a vent 
cavity monitored by a thermal conductivity leakage sensor. 

Dual seal was used on Saturn I-C, and was considered for the 
upper stages of the Saturn vehicle* The dual seal concept 
with thermal conductivity sensor is presently being evaluated 
under Contract NASI- 10840 by the McDonnell Douglas Astronautics 
Company* The application of this approach requires development 
of a seal concept that will provide a minimum weight flange 
as well as the development of the leakage sensor. 

b* Propellant and gas lines that are too small to utilize the 

dual seal design should be permanently joined where possible* 
When a mechanical joint is required, it could be wrapped with 
a chemically sensitive, color changing tape suited to the 
specific propellant. Each such joint must be inspected dur- 
ing ground operation* This approach provides inflight leak- 
age data, but does not convey this information during flight* 
Rocketdyne is currently working on this technique* 
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c. Inflight monitoring of system and engine valve internal 
leakage could be accomplished by ultrasonic detection. It 
is not obvious that this technique can be developed to meet 
the probable leakage criteria. However, it is the only de- 
fined method that is potentially feasible and practical. 
Sensors implanted in the valve body near the internal 

seal offer promise for internal leakage detection providing 
that the requisite leakage signatures can be established. 

d. The use of thrust chamber throat plugs in conjunction with 
a water displacement leak check has been used for some time 
to measure engine valve seal leakage. Since this is a very 
time-consuming operation, an effort should be made to circum- 
vent this technique during the maintenance retest operation. 
If ultrasonic leak detection should not prove effective for 
direct detection, a thermal conductivity type leak detector 
could be considered for this application. 

e. Regardless of the actual leakage detection methods used, an 
inflight hazardous gas monitoring system and an inert gas 
purging system will be required. The purge is required to 
expel possible hazardous gases from vehicle compartments. 

The hazardous gas monitoring system should be utilized to 
determine safe or unsafe conditions in the compartments. 

The data will also be used in evaluating ground maintenance 
requirements . 

In general, leakage detection provisions must be incorporated 
into the design of the hardware. The dual seal concept and the 
implanting of sensors are examples of this requirement. The 
development of leak detection techniques should also be accomp- 
lished during the early stages of hardware development. Of 
particular benefit to the Space Shuttle program would be the 
development of leakage detection devices requiring no moving 
parts or complex mechanisms. It is therefore recommended that 
the polymeric gas detector, the UV spectrometer, the ultrasonic 
leak detector, color changing tapes and the thermal conductivity 
detector should be considered for further evaluation. 
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CONTACTS ; . SUBJECT 


MARTIN MARIETTA CORPORATION 

Dr. James Bowman 
Dr. J. A. Muscari 
Mr. L. D. Williams 
Mr. A. C. Anderson 
Mr . N . H . Zaun 

■ JET PROPULSION LABORATORY 
Mr. R. S, Weiner 

KENNEDY SPACE CENTER 
Mr. B. A. Tolson 

LANGLEY RESEARCH CENTER 
Mr. V. L. Vaughn 

DYNAMATEC CORPORATION 
Mr. J. C . Janus 

ENVIRONMENT I INC. 

Mr. Robert Mack 

GENERAL MONITORS. INC. 

Mr. K. Cobb 

NORTH AMERICAN ROCKWELL CORPORATION 
Mr. Roy Dutton 


Thermodynamic properties of Hg 
Leak detection methods 
Leak detection methods 
Ultrasonic leak detection 
Spectroscopy 

Leakage Criteria 
Boeing Hj Detection Study 
Leak detection devices 
Ultrasonic leak detection 
Gas detection devices 
Hazardous gas detection 
Apollo leakage criteria 


BIBLIOGRAPHY : 

Pearce, J. L. and Associates, Inc., Study to Develop Improved Methods to 
Detect Leakage in Fluid Systems . Phase I & II NAS10-7291 and NAS10-7510. 

McDonnell Douglas Astronautics Co., Means of Leak Detection of Fluid Systems . 
Memo A 3-S30-BHQO-1107, 15 March 1971. 

Air Force Rocket Propulsion Laboratory, Aerospace Fluid Component Designers 1 
Handbook . February 1970. 

Jet Propulsion Laboratory, Leakage Testing Handbook. NAS7-396, July 1969. 

Aerojet Liquid Rocket Co., Investigation of TVC Lip -Seal Leak Check Test 
Methods, Internal Report, 24 October 1964. 

McDonnell Douglas Astronautics Co., Study of Damage Control Systems for Space 
Station . NAS1-10184, October 1971. 

Ohio University Research Institute, Leak Detection Technique Improvement 
Study for Space Vehicles. NAS8-11199, January 1967. 
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TABU II '12 

£AKAGE EVALUATION RESULTS 


COMPONENT / CONDITION 

APPLICABLE TIKE PHASE 

RECOMMENDED LEAKAGE DETECTION METHOD 

Hazardous Condition Hon It or lag 

Pre launch Operations 

A* Hot Filament Combustible Gas Detector 

(External Leakage) 


6, Gas Analyser 

0, Polymeric Gas Detector, UV Spectrometer 


Vehicle Ascent 

A. Hot Filament Combustible Gas Detector 

B. Gat Ana ly ter 

C. Polymeric Gas Detector, UV Spectrometer 


Orbital Operation 

A, Exposed Sensor-Ion Gas Analyzet 
B* Thermal Conductivity 

C, Polymeric Ges Detector, w Spectrometer 


Reentry 

A* Hot Filament Combustible Gas Detector 

| Gas Analyzer 

C, Polymeric Gas Detector, UV Spectrometer 


Pott flight Seflng Operations 

A, Hot Pi lament. Combustible Geo Detector 
R, Gas Analyte^ 

C, Polymeric Gae Detector, UV Spectrometer 

Internal System Valve a 

Ms i ntena nee /Pete s t 

A, Volumetric Displacement 

(Internal Leakage) 


*B, Pressure Decay 
C. Ultrasonics 


System Operation 

A. — 

*B. System Pressure S J System Dynamics 
C. Ultra so ntes 


Quiescent Flight Periods 

*A, System Pressures 
Ultrasonics 
C* Ultraeonics 

Engine Propellent Valvea 

Ha intena nee /Re test 

A, Thermal Conductivity 

(Internal Leakage) 


B, Volumetric Displacement 

C, Ultraeonics 


System Opera cion 

A, H/A 

B, N/A 

C, N/A 


Quiescent Flight Period 

A, — 

*B, Ultra conics 


i 

C, Ultra sonic a 

Hachanlcel Joints (£2" dla> 

Hi lnt cm nee /Retea t 

A, Thtrmal Conductivity 

(External Leakage) 


B. Mass Spectrometer 

C, — 


System Operation 

A* Thermal Conductivity 
*B, Capacitance Sensor 
G, — 


Quiescent Plight Period 

A* Thermal Conductivity 
*B, Capacitance Sensor 
C, 

Mechanical Joints J" dla) 

Ha In te na nee /Rate st 

A* Mass Spectrometer 

(External Leakage) 


B* Thermal Conductivity 
C, — 


System Operation 

A, — 

B* Chemical Color Change Tape 
C, Polymeric Get Detector 


Quiescent Plight Period 

B, Chemical Color Change Tape 
G, Polymeric Gas Detector 


LEGEND ; A, Pri» leak detection candidate from aval Labi* equipment or techniques chat can be directly applied to the specified 
leakage condition* 

B* The alternate choice to A* In all tapes, the alternate U a secondary choice, but still has taerlt for the applica- 
tion considered* 

J C, Candida tea uhich should be conaldered a« a technical goal for the Identified explication. This type of candidate is 
not developed, but the capability' has either been deuoastrated or identified through available literature or contacts, 

NOTE i Uhan a candidate does not exist or an acceptable method i* not known, a da eft ( — 1 > has been substituted for the candidate 
choice , 

*Does not fully Met Che leakage detection requirements. 
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A* O BJECTIVE S 

In our basic study* analytical techniques were developed and applied 
to define an approach for accomplishing the onboard checkout and monitor- 
ing functions of the Space Shuttle propulsion systems* Feasible approaches 
were defined for the functions of preflight checkout* performance monitor- 
ing* fault detection* fault isolation* emergency detection* post flight 
evaluation and maintenance retest . 

With that background* the objective of Task 2 of the extension to 
Contract MASS-25619 was stated in the Contract Scope of Work as follows: 

"O bject ive: To define and formulate a general 

specification for the incorporation of the on- 
board checkout and performance monitoring 
function into the design and development of 
the Space Shuttle Propulsion Systems. The 
specifics tion shall define how to analyze the 
systems using a step-by-step approach* The 
specification shall be general in nature such 
that it can be imposed on the Space Shuttle 
contractors without regard to the detail designs 
of the vehicle hardware , M 

The ground rules that were established for the formulation of the 
document were : 

The document will be written as a General Specification in 
a specification format * 

- Applicable documents will be included in the text of the 
specification where practical* Each document will be 
evaluated on an individual basis in this regard* 

- Coordination with NASA will be accomplished for the topical 
outline* final outline, preliminary release* and final re- 
lease of the general specification. 

B . RESULTS 

The original title selected for the document was '\Dn-Board Checkout 
and Performance Monitoring Function for the Space Shuttle Propulsion 
Systems* General Specification for". The word "performance" was de- 
leted from the title to preclude the sometimes narrow connotation that 
is associated with the phrase, "performance monitoring". The words 
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"propulsion systems" were deleted since the document was clearly applic- 
able to other systems and equipment. As the writing of the document 
progressed, it became clear that it could be given even greater applica- 
bility and would get wider usage if the content were presented in a 
slightly less formal manner than is customary in a specification. For 
that reason, plus the fact that the document was to identify techniques 
and approaches rather than specify design, the words "general specifica- 
tion" were deleted in favor of "guidelines". Those changes and a 
little rearrangement led to the adoption of the title, "Guidelines for 
Incorporation of the Onboard Checkout and Monitoring Function on the 
Space Shuttle". 

A general specification format has been followed in the document, 
however, the title of the customary "Quality Assurance" section has 
been deleted in favor of "Compliance Verification", This was done 
because the content of that section does not contain the traditional 
quality assurance material, but rather contains procedures and docu- 
mentation requirements for the verification that the intent of the 
Requirements Section of the document have been complied with. 

Since the applicable documents are small in number and are readily 
available from NASA and the Superintendent of Documents, U. S, Govern- 
ment Printing Office, Washington, D. C,, 20402, they have been referenced 
rather than included in the body of the document. 

For convenience, the guidelines document has been published under 
separate cover, as Volume II of this report. 



IV TASK 3 - EXPENDABLE BOOSTER STUDY 



A, OBJECTIVES AND RESULTS 


The objective of Task 3 was to define and evaluate the propulsion 
checkout and monitoring requirements for the Titan II I -L expendable 
booster* The task was conducted within the following guidelines: 

I. Conclusions and recommendations were to be consistent with the 
objective of maximizing cost effectiveness in the Space Shuttle 
program. 

2* Maximum use was to be made of the Space Shuttle Phase B Exten- 
sion Study* 

3. The study was restricted to the checkout and monitoring require- 
ments of a selected baseline Titan III-L configuration. 

4. The analyses were limited to typical system, subsystems, 
assemblies and components . 

5. The task considered only the operational vehicle configuration. 

6* Appropriate assumptions were made and documented where insuf- 
ficient orb iter or booster data were not available* 

The approach to Task 3 was based on the methodology developed 
during our basic study contract, and on the "Guidelines For Incorpor- 
ation Of The Onboard Checkout and Monitoring Function On The Space 
Shuttle", Task 2 of the current study. The "Guideline 11 document 
was developed in parallel with this task, and the approaches and for- 
mats available during the development of each task element were 
incorporated . 

The task was divided into four basic elements: Propulsion System 

Definition, Propulsion System Analyses, Checkout and Monitoring Require- 
ments Analyses, and Checkout and Monitoring Requirements Implementation* 
This approach, which is in accord with the Task 2 methodology, has 
been utilized in the presentation of the material in the following 
sections . 

The results and conclusions of the Titan III-L Checkout and Moni- 
toring Requirements study are summarized as follows; 



IV- 2 


1, To maximize cost effectiveness, the checkout and monitoring 
techniques utilized on the operational Titan Ill's should be 
retained for the baseline Titan III-L configuration, 

2* Certain control functions (flight control, booster staging, 
and portions of controls for emergency reaction) can best be 
accomplished from the orbiter. 

3* The onboard checkout and monitoring functions identified in 
Task II are directly applicable to the expendable booster 
propulsion. Only the degree of usage and location of imple- 
mentation are different, 

4e The booster checkout and monitoring impact on the orbiter 

requirements is slight. A limited amount of data is transmit- 
ted to the orbiter for crew alert (caution and warning) and 
emergency action. 

5- The impact on existing propulsion hardware design is minor. 

The direct impact is to the instrumentation, i *e , , the number 
of required measurements, sensor redundancy, and sensor 
locations. 

Two supporting research and technology items were identified, a 
solid rocket motor case burnthrough detector and a liquid rocket engine 
compartment fuel leakage or fire detector. Further evaluation of the 
best technical approach and of the current state-of-the-art are required 
before firm recommendations can be made on these items, 

B. PROPULSION SYSTEM DEFINITION 


This section defines the Titan III-L expendable booster propulsion 
systems that formed the basis for the study. First, a summary descrip- 
tion of the baseline Space Shuttle vehicle configuration is presented 
on pages IV-3 and IV-4 c The booster main propulsion system (core) 
and the solid rocket motor system are then described. (For continuity 
with the subsequent analyses, the propulsion elements are defined in 
terms of systems , subsystems , assemblies and components , and a decimal 
nomenclature system is used.) Finally, the functional operations of 
the booster propulsions systems are discussed, starting on page IV-19. 

1. Vehicle Configuration - The selected study configuration is 
the Martin Marietta Corporation Baseline Vehicle as of August 
23, 1971, and ife illustrated in Figure IV- 1. The vehicle is 
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Booster Configuration - Figure IV-2 shows the Titan III-L 
booster, which is designated the 1207-4 spread configuration. 
The booster consists of a sixteen foot diameter liquid fuel 
core with five Aerojet Liquid Rocket Company LR-87 engines 
and four 120 inch United Technology Center UA 1207 solid roc- 
ket motors mounted in the yaw plane, two on either side of 
the core. The liquid-fuel core utilizes nitrogen tetroxide as 
the oxidizer and Aerozine-50, a solution of hydrazine and UDMH, 
as the fuel. The five core engines supply a total sealevel 
thrust of 1,133,370 pounds. The liquid rocket engines are 
precanted 9° in pitch to compensate for the Z-axis CG offset. 
The center engine is hinged in pitch to facilitate CG tracking, 
while the outboard engines have gimbal capabilities of + 4.5 
degrees in pitch and yaw. The four solid rocket motors develop 
a total of 5,570,400 pounds thrust. The solid rocket motor 
nozzles are precanted six degrees in a plane rotated 30 degrees 
out of pitch. 



Figure IV-2 Booster Configuration 


IV" 5 


3* Booster Main Propulsion System (1*0) - The booster main propul- 
sion system consists of the engines, propellant management sub- 
system, and pressurization subsystem on the liquid-fueled core 
of the Titan II1-L booster* Figure 1V-3 is a schematic repre- 
sentation of the system* Pertinent character ist ics of the 
system are as follows: 


Propellants 

No, of engines 
Type 

Thrust level 
Ignition 
Area ratio 
Chamber pressure 
Thrust vector control 

Oxidizer tank pressurization 

Fuel tank pressurization 

Usable oxidizer 
Usable fuel 
Burntime 


nitrogen te tr oxide /50% 
hyd r a z ine , 50 % UDMH 

five 

turbopump- fed 

226,670 lb * each at sealevel 

hypergolic 

12:1 

800 psia 

gimballed with hydraulic 
actuators 

autogenous (vapor ized 
oxidizer) 

autogenous (cooled gas gener- 
ator exhaust) 

800,600 lbs* 

419,000 lbs* 

276 seconds 


The main propulsion system is further defined in the following 
pages* 
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Figure IV-3 Main Propulsion System 
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a* Main Engine Subsystem (1*1) - The main engine subsystem 

is a storable liquid propellant, turbopump fed configuration 
that develops 226,670 lb sealevel and 257,750 lb altitude 
thrust* Five engines are used on the Titan III-L booster* 
The engine is shown schematically in Figure IV-3. The 
assemblies and components are identified in Table IV-1. 

The suction lines duct the fuel (Aerozine-50) and oxidizer 
(nitrogen tetroxide) from the propellant feed lines to the 
pumps, which are driven by a turbine rated at 5000 h.p. 

The fluid pressure is increased through the pumps to force 
the propellants into the thrust chamber* Thrust chamber 
valves are utilized to control engine start and shutdown. 

The gas generator is operated by propellants from the pump 
discharge lines to drive the turbine. Combustion in the 
thrust chamber produces gas at a pressure of 800 psia and 
temperature of approximately 5000°F. 

The engine requires no thrust or mixture ratio controls; 
it is pre-set to consume propellants at fixed rates* 

Balance orifices in the propellant discharge lines and 
cavitating venturis in the gas generator bootstrap lines 
determine the steady- state level* The propellant flow 
rate established by the discharge line orifices is a 
function of both upstream and downstream pressures. The 
cavitating venturis establish a flow rate that is sensi- 
tive only to upstream pressure, maintaining a constant 
flow rate over a wide range of downstream pressures. The 
control of propellant flow rate to the gas generator 
results in a stablized turbine speed. The propellants are 
hypergolic (they ignite on contact with one another), and, 
therefore, no ignition system is required to initiate com- 
bustion in the thrust chamber or gas generator . 

Thrust vector control (pitch, yaw and roll) is achieved 
by pivoting the thrust chamber on gimbal bearing mounts* 

The gimbal action of the thrust chamber is provided by 
hydraulic actuators which operate in response to signals 
from the vehicle control system* 

During booster operation, oxidizer and fuel tank pressurants 
are supplied by the engine subsystem* This part of the 
engine subsystem is discussed in the main pressurization 
subsystem section, page IV- Id* 
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bo Main Propellant Management Subsystem (1*2) - The main pro- 
pellant management subsystem provides feed^ distribution 
and storage of the propellants. The propellant tanks are 
mounted in tandem with the oxidizer tank in front. The 
fuel tank has 5 internal conduits to duct the oxidizer to 
the rocket engines. Both tanks have an access cover in 
the forward dome* The oxidizer tank is 16 feet in diameter 
and has a 9000 ft^ volume* Five 7-inch diameter feedlines 
are used to deliver oxidizer to the engines. The fuel tank 
is also 16 feet in diameter with 7600 ft^ volume. Five 6* 
inch diameter feedlines are used to deliver fuel to the 
engines. Appropriate tank baffles and contoured outlets 
are provided in each tank. Accumulators are used for POGO 
suppression. 


TABLE IV- 2 

MAIN PROPELLANT MANAGEMENT SUBSYSTEM 



Tank Assembly 

1.2. 1.1 

Oxidizer Tank 

1.2. 1.2 

Oxidizer Pogo Suppressor (5) 

1.2. 1.3 

Oxidizer Prevalve (5) 

1,2.2 Fuel Tank Assembly 

1.2.2. 1 

Fuel Tank 

1.2. 2. 2 

Fuel Pogo Suppressor (5) 


Fuel Prevalve (5) 
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c, Main Pressurization Subsystem (1,3) - The main pressurization 
subsystem provides the necessary pump suction pressure for 
proper pump operation. The propellant tanks are pre- 
pressurized with nitrogen prior to engine start through 
the two-inch tank vents. During engine operation, pressur- 
izing gas is supplied to the tanks by the engine autogenous 
(self-generating) system at a controlled rate to make up 
for the removal of propellant from the tanks. The fuel 
tank is pressurized by diverting a portion of the engine 
gas generator output from the turbine inlet manifold to 
the tank. This gas is cooled by passing it through a 
fuel-coupled heat exchanger. Fuel flows from the pump dis- 
charge line through the gas cooler back to the suction side 
of the pump. A sonic nozzle in the autogenous gas line 
maintains a flow rate that is insensitive to tank pressure, 
and a 300 psid burst diaphragm prevents gas flow to the 
tank until gas generator operation begins. 

The oxidizer tank is pressurized by heating oxidizer to the 
gaseous state and ducting it to the tank. Oxidizer is piped 
from pump discharge to a heat exchanger (fluid heater) 
located in the turbine exhaust stack. A cavitating venturi, 
located at the fluid-heater inlet, maintains a constant flow 
rate insensitive to downstream pressure, and a burst dia- 
phragm prevents oxidizer autogenous flow until the discharge 
pressure reaches approximately 300 psia. A loop in the 
inlet line traps air to ensure pneumatic operation of the 
burst diaphragm. A back pressure orifice provides suffic- 
ient residence time of the oxidizer in the fluid heater to 
achieve the proper gas temperature of the pressurant. 

The Main Pressurization Subsystem is shown schematically 
in Figure IV-4, and the assembly and component identifica- 
tion is presented in Table IV-3, 



Burst 

Diaphragm 
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Figure IV-4 Main Pressurization Subsystem 



TABLE IV -3 

MAIN PRESSURIZATION SUBSYSTEM 


1 * 3* 1 Oxidizer 

Pressurization Assembly 

1.3. 1.1 

Fluid Heater 

1.3. 1.2 

Cavitating Venturi 

1.3. 1.3 

Back Pressure Orifice 

1.3. 1.4 

Burst Diaphragm (autogenous) 

1.3.1. 5 

Check Valve 

1.3. 1.6 

Oxidizer Pressurization and Vent 
Valve 

1.3. 1.7 

Oxidizer Tank Diaphragm 

1,3*2 Fuel Pressurization Assembly 

1.3.2. I 

Gas Cooler 

1.3. 2. 2 

Sonic Nozzle 

1.3. 2. 3 

Burst Diaphragm (autogenous) 

1.3. 2.4 

Check Valve 

1.3. 2. 5 

Fuel Pressurization and Vent Valve 

1.3. 2. 6 

Fuel Tank Diaphragm 
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4, Solid Rocket Motor System (2.0) - The solid rocket motor system 
consists of four solid rocket motor (SRM) and thrust vector 
control (TVC) subsystems* Each SRM consists of a forward 
closure , an aft closure, and identical, interchangeable 
segments* Other components include a 6° canted nozzle, and 
fore and aft solid propellant staging rockets* The TVC in- 
jectant, nitrogen tetroxide, is carried in a tank mounted on 
the side of the SRM and is pressure fed into the nozzle exit 
section by nitrogen gas* Figure IV-5 illustrates components 
and assemblies of the solid rocket motor system* 

a* Rocket Motor Subsystem (2*1) ~ The selected motor is com- 
posed of seven segments and is designated as Model 1207. 
Thrust termination capability, developed on the original 
T-IIIC SRM, is provided for Model 1207 through the use of 
ports, located at the forward end of 'the motor, which may 
be ejected on command to permit thrust termination in case 
mission abort becomes necessary. 

The motor case (segments and closures) is constructed of 
D6aC steel, heat-treated to an ultimate strength of 195,000 
psi* Each joint is a pin and clevis type held together by 
240 cylindrical pins* During assembly of the motor, the 
pins are inserted by hand and held in place by a retaining 
strap, A gas pressure seal between segments (and closures) 
is provided by an 0-ring. 

Each segment contains approximately 72,400 lb, of polybuta- 
diene acrylic acid acrylonitrile (PBAN) composite propellant 
which uses powdered aluminum fuel and ammonium perchlorate 
oxidizer. The plastic matrix, PBAN, also serves as a fuel* 
The case-bonded propellant grain has a circular port which 
tapers 10 inches throughout the 10-foot length of the seg- 
ment. The forward end has the smaller port. The purpose 
of this taper is to provide the 10-second controlled tail- 
off at the end of web-,action time. The forward end of each 
segment is inhibited from burning by a rubber restrictor 
bonded to the propellant surface. Silica-filled, butadiene 
acrylonitrile rubber insulation protects the motor case 
from combustion gas during motor operation. The insulation 
is thickest in the segment joint areas where there is no 
unburned propellant to protect the case walls. 

The closures contain the same type of propellant as the 
segments, and the forward closure has mounting provisions 
for the igniter. Instead of the cylindrical grain shape 
of the segment, the forward closure has an 8-point star 
internal burning grain configuration. The forward closure 
is 135 inches long and contains 61,000 lb. of propellant. 
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ROCKET motor 
IGNITER 


NOSE SECTION 
FAIRING 


NOSE SECTION 
SUPPORT SKIRT 


SUPPORT RING 


FORWARD CLOSURE 


SEGMENT 
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INJECTANT TRANSFER 
TUBE 
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Figure IV-5 Solid Rocket Motor System 
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The aft closure contains approximately 20,300 lb* of propel- 
lant in a straight cylindrical bore configuration and projects 
64 inches from the segment joint to a 57-inch diameter boss 
for nozzle attachment* 

The propellant burns along the entire central port of the SRM 
and also on the aft end of each segment between segments. The 
closures also burn on their ends. Three inches of clearance 
are left between the grains of adjacent segments to permit 
this burning. The igniter burns for approximately 1 second 
to fill the grain bore with burning gases to ignite the motor. 
The SRM has a regressive thrust-time curve produced in part 
by the star configuration of the propellant grain in the 
forward closure of the motor. During the early phases of 
burning, this portion contributes much of the gas flow 
necessary to produce the high initial peak in the thrust- 
time curve. 

The SRM nozzle consists of a throat section and a two- 
piece exit cone assembly. High-density graphite rings backed 
by a steel support shell and silica insulation are bonded 
in a steel housing to make up the nozzle throat section. 

The nozzle middle section consists of graphite and silica 
phenolic liners bonded to a steel outer shell * This section 
contains the thrust vector control injection ports * The 
exit section is an extension of the silica phenolic liner 
of the middle section except that its structural shell is 
aluminum honeycomb sanwiched between steel for lighter 
weight. The three sections are bolted together, forming an 
assembly approximately 14.5 feet long* Nozzle expansion 
ratio is 9.18:1, and the half-angle is 17°. The SRM assem- 
blies and components are listed below. Figure IV-6 depicts 
the subsystem* 


TABLE IV-4 

ROCKET MOTOR SUBSYSTEM 


2*1.1 SRM Assembly 

2.1. 1.1 

Forward Closure 

2. 1.1.2 

Segment (7) 

2. 1.1. 3 

Aft Closure 

2. 1.1.4 

Nozzle 

2. 1.1.5 

Rocket Motor Igniter 

2. 1.1. 6 

Thrust Terminating Device 

2. 1.1.7 

Destruct Device 

2,1.2 Staging Rocket Assembly 

2. 1.2.1 

Staging Rocket Motor (18) 

2. 1.2. 2 

Staging Rocket Motor Housing 



XV- 16 



Figure IV-6 Rocket Motor Subsystem 
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b* Thrust Vector Control Subsystem (2,2) - Thrust vector con- 
trol for the UA 1207 SRM Is achieved through fluid injection 
in the nozzle exit cone* The 3*5 ft, diameter injectant 
tank, which is mounted on the side of the SRM, contains 12,000 
lb* of nitrogen tetroxide and is charged with nitrogen gas 
to a pressure of 1,100 psi* The ullage pressure decays to 
about 500 psi during the flight duty cycle* 

Nitrogen tetroxide passes through an injectant transfer tube 
and a toroidal injectant manifold to the 24 electromechanical 
injectant valves* These valves are actuated electrically in 
response to commands from the core flight control system* 

The TVC subsystem can provide the required side forces with 
only five of the six valves operable in any quadrant. The 
subsystem provides a jet deflection of 0 to 4 degrees* The 
subsystem is designed to dump excess nitrogen tetroxide during 
booster operation to minimize burnout weight, and is capable 
of a slew rate of 10 degrees per second at all times during 
SRM operation* 

During countdown, pressurized fluid fills the entire TVC 
system through the injectant valves to aluminim cylinders 
and caps (pyroseals) that protrude into the nozzle exit 
cone. The pyroseals and caps extend a short distance into 
the nozzle and are burned off at ignition by the exhaust 
flame, thus activating the TVC system* The subsystem con- 
figuration is shown in Figure IV-7. The TVC assemblies and 
components are as follows: 


TABLE IV-5 

THRUST VECTOR CONTROL SUBSYSTEM 


2.2.1 TVC Tank 

Assembly 

2.2. 1.1 

Injectant Tank 

2.2. 1.2 

Nitrogen Pressurization Valve 

2. 2. 1.3 

Injectant Fill and Drain Valve 

2. 2. 1.4 

Injectant 1 Transfer Tube 

2.2,2 Injectant 

Valve Housing Assembly 

2. 2. 2.1 

Injectant Valve (24) 

2. 2. 2. 2 

Pyroseal (24) 
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n 2 shut off valve 



Figure IV-7 Thrust Vector Control Subsystem 
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5* Operations - Figure IV-8 depicts the operational timeline for 
the Titan III-L and the drop tank orbiter* The booster vehicle 
checkout and assembly is similar to the operation presently per- 
formed on the Titan III-B vehicle. A checkout matrix is shown 
in Table IV-6 and the vehicle assembly flow is shown in Figure 
IV-9* The main propulsion tanks are loaded with 800,600 lb. 
oxidizer and 419,000 lb. fuel. The TVC tank is loaded with 
12, 000 lb. of nitrogen tetroxide. At T-60 hours, the main 
propellant management subsystem is pre-pressurized to 28 psia 
and the TVC subsystem is pressurized to a flight pressure of 
1,100 psia. At T-2 hours, after arming and ready status veri- 
fication, the final countdown is initiated , At T-35 seconds, 
an automatic sequence signal is supplied to the launch vehicle* 
This signal accomplishes the following: (1) the prevalves are 

opened permitting fuel and oxidizer to fill the engine, and 
(2) the engine starting electrical circuits are readied for 
receipt of the firing signal. 

Opening the prevalves places the engine in the fill and bleed 
condition. Both fuel and oxidizer fill the engine above the 
thrust chamber valves due to the static pressure of the propel- 
lants in the tanks above the engine. Air entrapped in the 
oxidizer lines travels through 3/8 inch flex lines, connected 
on each subassembly from the discharge line near the pump 
outlet flange (high point) to the suction line, up into the 
oxidizer tank* Air removal from the fuel lines is accomplished 
as fuel hydraulic pressure actuates the thrust chamber valves 
at engine start. 

The fuel-operated valve actuation system consists of a rod and 
piston mechanically linked to the thrust chamber valves (TCVs), 
held closed by springs and opened by fuel pressure. A pressure 
sequencing valve (PSV), also held closed by a spring and opened 
by fuel pressure, acts as a pilot valve to the TCV actuator. 

Fuel bleed is accomplished by allowing fuel to flow through a 
1/2 inch flex line from the high point on the discharge line 
at the TCV discharge line connecting flanges to the PSV inlet 
port* While in the bleed position, the PSV diverts the fuel 
into and through the closing side of the TCV actuator, through 
a 1/4 inch stainless steel vent line to an overboard manifold 
mounted on the PSV, and out an overboard drain line through 
a check valve which serves only to protect the PSV from contam- 
ination. A bleed orifice, located in the drain line and PSV 
manifold connection, controls the bleed rate to approximately 
1200 cc per minute per engine. As long as the engine remains 
in the fill and bleed condition, fuel is bled overboard in the 
manner and at the rate described* 
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TABLE IV -6 

BOOSTER PROPULSION CHECKOUT 


Test Nomenclature 


1. Booster Main Propulsion System 



Instrumentation Check X 
Electrical Harness Check X 
TCPS Check X 
TPA Torque Check X 
Thrust Chamber Valve Functional X 
PSVOR Position Verification X 
Torque Verification Test X 
Engine Leak Checks X 
Ordnance Test X 
Propellant Tank Hydros tat X 
Propellant Tank Leak Check X 
Prevalve Switch Test X 
Propellant Tank Calibration X 
Prevalve Boroscope Inspection X 
Accumulator Compliance Test X 


X 

X 

X 

X 

X 

X 

X 

X 

X 


X 


2, Solid Rocket Motor System 


Instrumentation Check 
Alignment Checks 
TVC Subsystem Leak Check 
Injectant Valve Functional 
Ordnance Test 
Composite System Test 
SRM Leak Check 


X 

X 

X 

X 

X 

X 


X 

X 

X 

X 

X 

X 

X 


3 . Combined Propulsion System 


Flight Instrumentation Check 
Ordnance Check 
Combined System Leak Check 
Combined System Test 


X 

X 

X 

X 


X 


X X 
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After completing the bleed cycle, the start signal applies 28 
vdc to the initiator charges of a solid propellant start cartridge 
mounted on the turbine inlet manifold of each engine. Two 
diametrically opposite engines are started sequentially at 0*1 
second intervals. The center engine is started at 0.1 second 
after start command to the last pair* The start cartridge 
solid propellant ignites and supplies gas to the turbines caus- 
ing them to accelerate. The turbine shaft of each engine is 
connected through a gear train to the fuel and oxidizer pump 
so that pump operation also begins. Since the thrust chamber 
valves are closed, no propellant flows, and pump acceleration 
produces only an increasing pressure in the discharge lines 
and valve actuation system. 

When fuel discharge pressure reaches approximately 300 psia, 
the pressure on the opening end of the PSV spool produces a 
force which exceeds the spring force on the PSV spool closing 
end causing the spool to shuttle from the bleed position to 
the operation position. This occurs approximately 0.25 seconds 
from start signal. Relocation of the PSV spool to the operation 
position halts flow of fuel to the closing side of the TCV 
actuator, terminating fuel bleed, and allows fuel to enter the 
actuator opening side. The fuel pressure, increasing beyond 
the 300 psia PSV actuation pressure, is immediately sufficient 
to operate the TCV actuator, initiating opening of the thrust 
chamber fuel valve. The fuel and oxidizer valves are mechan- 
ically linked so that both move simultaneously. The rate of 
motion of the TCV actuator piston is controlled by an orifice 
located in the overboard drain manifold to PSV housing con- 
nection nearest the PSV opening end. This opening orifice 
controls the rate at which bleed fuel can be expelled from 
the TCV actuator. Valve opening begins approximately 0.3 
second after start cartridge initiation. At approximately 
1.1 seconds after start signal the valves are fully opened* 

Propellants begin to flow to the thrust chamber at the time the 
valves begin to open. Oxidizer flows directly into the injector 
dome, filling the oxidizer injector manifold, through orifices 
into the combustion chamber. Fuel is used to regeneratively 
cool the combustion chamber and must fill a toroidal manifold 
and flow through stainless steel cooling tubes that make up 
the chamber walls before reaching the injector fuel orifices 
and entering the combustion zone. The larger volume the fuel 
must fill before reaching the injector orifices results in an 
oxidizer lead into the combustion zone ♦ This slight oxidizer 



lead (0,25 to 0,30 sec) provides a characteristically smooth 
start* Initial pressurization of the chamber during oxidizer 
lead ejects the skirt exit closures* 

Opening the thrust chamber valves causes a momentary decrease 
in discharge pressures as the volume between the TCVs and in- 
jector orifices is being filled with propellant. At approxi- 
mately 0,8 second after start signal this filling is completed 
and hypergolic ignition of the fuel and oxidizer takes place 
in the combustion chamber. At this point in time pressure in 
the discharge lines again increases, and fuel and oxidizer 
are forced through flex lines attached from the main propellant 
discharge lines, downstream of the TCVs, to the gas generator* 
Check valves located at the gas generator end of these boot- 
strap lines prevent the flow of start cartridge gas into the 
discharge lines * The gas generator ignites at approximately 
0.9 second after start signal and supplies gas to drive the 
turbines. At approximately 1*1 seconds after start signal, 
the start cartridge burns out, and the engine has reached its 
operating level, i,e., it has lf boot st rapped ", 

The outputs of the three thrust chamber pressure switches 
(TCPSs) of each liquid engine are majority voted to provide an 
engine operation status signal. The TCPSs are calibrated to 
switch when engine chamber pressure has attained 77 % of nominal 
operating pressure* The receipt of nominal chamber pressure 
indications from all five liquid engines is a condition to 
initiate the solid rocket motor ignition sequence. The SRM 
ignition command fires redundant squibs located in the Safe 
and Arm device of each SRM, A pyro train provides the required 
energy to ignite the main propellant grain, providing a nominal 
thrust build up in 250 msec. The grain is designed to produce 
an initial thrust of 1.5 million pounds (which regresses to 
approximately 1.1 million pounds in 115 seconds, followed by 
a 15 second tail-off.) 

The nozzle operating temperature is more than sufficient to 
burn off the aluminum "pyro*seal M closures at the outlet of 
each TVC injectant valve, thereby activating the thrust vector 
control subsystem. Side forces of up to 100,000 pounds are 
provided to each SRM by the thrust vector control subsystem 
on command signals from the core. Pressurized N 2 O 4 is injected 
into the nozzle exit cone through six electromechanical valves 
in each quadrant which deflect the exhaust gases through the 
formation of an oblique shock wave in the SRM nozzle. 
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Shortly after end of. web action time, sensed deceleration 
initiates the SRM staging timer* At a preprogrammed time inter- 
val ^ the forward attach explosive nuts, the aft explosive attach 
bolts, and the staging rockets are activated* The SRMs are staged 
simultaneously in pairs such that the resultant direction is down 
and away from the core vehic le . 

At T+130 seconds a core-orbiter overlap burn is initiated by 
starting two of the three orbiter main engines. Depletion 
of either or both of the core propellants commands LRE shut- 
down and orbiter staging at approximately T+277 seconds. 

Exhaustion of either or both core propellants is determined 
by the liquid engine TCPs which are monitored during an appro- 
priate time interval (TCPS enable). The core engine shutdown 
sequence is initiated when the first of the five TCPS signals 
indicates that engine chamber pressure has decreased to 77% or 
less of nominal operating pressure. As in the engine start 
sequence, each of the five TCPS signals is a resultant of the 
indications of three majority voted pressure switches. 

At T+282 seconds, the third orbiter main engine is started. The 
orbiter attains orbit inject velocity at approximately T+444 seconds. 
The sequence of major events from propellant loading to orbit 
inject is presented in Table IV~7. The ascent trajectory profile 
is shown in Figure IV-10. 
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Figure IV-10 Ascent Trajectory Sequencing Profile 
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6. Propulsion-related Avionics - The avionics related to the pro- 
pulsion systems consists of portions of the vehicle electrical 
and electronic subsystems. An overall view of the intercon- 
nections between propulsion and avionics is shown in Figure 
IV- 11. These interconnections are discussed in the following 
paragraphs. 

a. Digital Interface Units (DIUs) - The DIXJs are extensions 
of the orb iter Centra 1 Computer Complex (CCC) * and provide 
the interfaces between the booster avionic subsystems and 
the CCC via the digital data bus. Propulsion related 
signals which interface with the DIUs, depicted in Figure 
IV-12j are as follows: 

1) Steering and Dump signals are provided from the DIU 
to the booster thrust vector control (TVC) driver 
electronics* The steering signals are issued in 
accordance with the desired flight attitude which is 
controlled by the orbiter. The dump signals are 
issued from the orbiter in accordance with a nominal 
preprogrammed dump schedule. The TVC electronics 
interprets the steering and dump signals and provides 
the outputs required to drive the actuator valve coils 
in the liquid rocket engines and the injectant valve 
positioning electronics in the solid rocket motor TVC 
subsystem. The TVC driver electronics integrates the 
outputs to the SRM valves to determine the total injec- 
tant fluid usage versus flight time and adjusts the 
SRM steering-dump commands to correspond with the 
preprogrammed dump schedule * 

2) Rate and lateral acceleration inputs from booster 
flight control components are sent to the orbiter via 
the DIU. The booster rates and accelerations are 
used in conjunction with orbiter attitudes and rates 
to determine the steering required, 

3) Malfunction detection logic outputs from the booster 
are provided to the orbiter CCC via the DIU. The mal- 
function detection logic outputs provide the status 

of booster parameters which can indicate that a hazard- 
ous condition exists on the booster. 

4) Discrete sequencing and driving circuit inputs from the 
DIU and malfunction detection logic are provided to con- 
trol LRE and SRM functions such as start and shutdown 
commands . 
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Figure IV-ll Titan III L Propulsion Related Avionics 
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Figure IV- 12 DIU/Orbiter/GSE Interfaces 
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b, Titan III L Instrumentation System - The instrumentation 
system baselined for T-III L is similar to the system used 
on existing Titan III vehicles* The operation and inter- 
face requirements for the instrumentation system are as 
follows : 

1) The typical sequence of operation for propulsion 
measurements sensed and transmitted by the T-III L 
instrumentation system are shown in Figure IV-13* 

The measurements originate as electrical signals from 
sources such as pressure transducers, bus voltages or 
discrete switches. If the electrical signal Is not 
compatible with the required inputs of the Remote 
Multiplexer Unit (RMU), it is sent to a signal con- 
ditioner where it is transformed into a compatible 
signal* The signal is then sampled and amplified in 
the RMU and* upon command from the RMIS Converter 
Unit (CU), it Is sent to the CU in Pulse Amplitude 
Modulated (PAM) form. The CU transforms the PAM 
signal into digital form and places the digital in- 
formation in a serial binary pulse train which modu- 
lates the PCM/FM transmitter* The transmitter 
amplifies and provides the S-Band RF carrier on which 
the PCM wave train is transmitted to ground receiving 
stations for decoding, recording and display of data* 

2) Ground interfaces with the airborne instrumentation 
system are required for test and checkout as follows: 

a) The PCM landline outputs are used to present the 
RMIS outputs to the ground station without the 
use of the RF subsystem. This method of monitor- 
ing the PCM outputs is used during subsystem test- 
ing and when it is expedient not to radiate RF, 

b) Ground Instrumentation Equipment (GIE) must be 
mated directly with the RMIS converter unit to 
program the memory of the CU. This operation is 
performed to obtain the desired sample rate for 
all applicable measurements* 

c) Certain tank instrumentation such as temperature 
transducers may also be monitored during and 
following liquid propellant loading operations . 
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c. SRM Electrical Subsystems - The SRMs have 3 subsystems 
that involve avionics* The functions performed by these 
SRM subsystems* in conjunction with the electrical/elec- 
tronic signals and components involved* are shown in 
Figure IV-14 and are discussed in the following paragraphs. 

1) The SRM ordnance electrical subsystem provides for SRM 
ignition* staging, and thrust termination as well as an 
Inadvertent Separation Detection System (ISDS), The 
ignition and staging functions are performed upon 
receipt of discrete commands from the core vehicle* 

The thrust termination function is capable of being 
activated either by the core or by the ISDS. The 
ISDS provides the required logic* power and ordnance 
for thrust termination of the SRM should it become 
inadvertently separated from the core* Power for all 
other ordnance subsystem functions is supplied from 
the core Transient Power System (TPS), 

2) The SRM Thrust Vector Control (TVC) subsystem is used 
to provide SRM steering by the injection of nitrogen 
tetroxide Into the nozzle exit cone to deflect the 
exhaust gases * Twenty- four electromechanical injectant 
valves are arranged in groups of six around the exit 
cone. The valves control the flow of injectant in 
accordance with 0 to 10 volt command signals received 
from the TVC driver electronics in the core vehicle* 
While steering is accomplished via the injection of 
fluid in the individual quadrants* excess injectant 
fluid is dumped equally in all quadrants* TVC power 

is derived from the TVC battery’ during flight* Before 
launch* ground power is supplied through the ground 
power umbilical* On command from the ground, a motor 
actuated switch connects the TVC battery (s) to the 
power distribution bus* 

3) The SRM instrumentation subsystem monitors performance 
of the SRM system during countdown, launch and flight 
and provides data for major malfunction analysis* Per- 
formance parameters, in the form of analog signals, 
obtained from transducers and monitors located through- 
out the SRM* are routed to the aft instrumentation box, 
and on to a remote multiplex unit.. The analog signals 
are sampled and amplified in the RMU and upon command 
from the core RMIS Converter Unit (CU), the signal is 
sent Through the forward staging disconnects to the CU 
in PAM form* 
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Figure IV- 14 SRM Avionics 
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4) The SRM ground power umbilical is used to provide 

ground power, vehicle monitor power and commands from 
ground equipment* Monitors required to determine 
the status and performance of the ordnance electrical 
system for ground checkout, combined systems test, 
and launch countdown and holds are provided to ground 
facilities via the SRM ground power umbilical* 
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C . C HECKOUT AMD MONITORING REQUIREMENTS 

The results of the studies that were conducted to establish the 
Titan III-L propulsion checkout and monitoring requirements are pre- 
sented in this section. The effort included defining the sequence and 
logic of propulsion system control, and performing a failure modes and 
effects analysis on the propulsion systems. The resultant information 
was then evaluated to establish the propulsion system data acquisition 
requirements. Also, tradeoff studies were conducted to establish cri- 
teria for allocating the functions of checkout, monitoring, and control 
of the propulsion systems to orbiter and booster onboard equipment and 
ground support equipment . 

1. P ropu ls ion Con t rol Sequence and Logic : The propulsion control 

sequence and logic is illustrated in Figure IV- 15. The infor- 
mation presented in the figure deals with the period beginning 
with automatic sequence terminal count (T-35 sec . ) and contin- 
uing through booster shutdown and staging. A detailed discus- 
sion of the propulsion systems' functional operations was 
presented in Section IV-B paragraph 5. 

2. Failure Modes and Effects Analysis : The ground rules used in 

conducting the propulsion failure modes and effects analysis 
(FMEA) are presented in Appendix A of this volume, together 
with the FMEA worksheets. In addition to defining candidate 
parameters for the checkout and monitoring function, the FMEA 
identified thirty Criticality 1 failure modes. However, the 
probabilities of occurence of these Criticality 1 failures 
are quite low, and none have been experienced on Titan III 
flights. 

3 * Data Acquisition Requirements : Candida te parameters were 

defined by evaluating the control sequence and logic summary 
and the FMEAs. Also, capability for performing a postflight 
analysis of propulsion system performance was considered. The 
resultant parameters are identified in Table IV-8. The param- 
eters and the associated propulsion elements are listed, with 
the propulsion element nomenclature as defined in the propul- 
sion configuration definition. Section IV-B. The expected 
range, allowable error, use of the data, and time of data 
activity are defined for each parameter. Response rates and 
sample rates are also defined and are based on current Titan 
III usage and capabilities. 
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Fun c tion Incorporation: Evaluations were conducted to define 

the recommended approach and supporting rationale for perform- 
ing the functions of control, checkout and monitoring of the 
Titan III-L propulsion systems. 

a* Propuls ion System C ontrol : Table IV- 9 identifies propul- 

sion system control functions, applicable candidates for 
initiating the control functions , and the recommended 
approach for each. The control functions are categorized 
in the table according to mission phase, i*e*, prior to 
mating of the booster and orbiter, postmate/preflight, and 
inflight , It is recommended that ground equipment be 
used to initiate the control functions during ground 
operations up to start of automatic sequence terminal 
count* The rationale supporting this judgment is that a 
proven design for ground equipment and basic operating 
procedures exist for accommodating the control functions 
associated with subsystem and system checkout, propellant 
loading and pressurization* It is further recommended 
that ground equipment be used for the automatic sequence 
terminal count and launch execution control functions for 
the same reason* However, these control functions can be 
performed from the orbiter if launch operations require- 
ments so dictate. 

The inflight propulsion control functions are allocated 
as shown in the table. Thrust vector control and SRM 
separation will be initiated from the vehicle flight con- 
trol system, which is located in the orbiter* SRM thrust 
termination for boost phase abort will also be initiated 
from the orbiter, since this function must originate from 
a flight-crew decision or from central computer complex 
logic* SRM destruct in case of inadvertant SRM separation 
will originate from the SRM's inadvertant separation des- 
truct system (ISDS), Normal liquid engine shutdown will 
originate from the booster in the case of propellant deple 
tion, but can originate in the orbiter when the required 
boost phase velocity is achieved. Individual booster 
engine shutdown can be initiated by the booster (low 
chamber pressure) or from the orbiter. Range safety 
booster destruct is a ground-originated function* 
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b. P ropu l sion S ystems Checkout : The checkout function is 

performed during ground operations to assure flight readi- 
ness (there is no inflight checkout of the Titan III-L 
propulsion systems * since operation of the propulsion sys- 
tem is initiated prior to lift off). The booster propul- 
sion systems checkout can be accomplished by using conventional 
Titan III ground support equipment (GSE), by incorporating 

the checkout function into the arbiter* or by developing 
and using nett booster GSE. (Incorporating the checkout 
function on board the booster is not an option in this 
case* since the booster is unmanned and non-recoverable,) 

Table IV- 10 delineates certain advantages and disadvantages 
for each of the three options. It is recommended that 
conventional Titan III GSE be employed for ground checkout 
of the booster propulsion systems. The driving factor for 
this recommendation is the low acquisition cost and the 
degree of cost credibility of this approach; this factor 
is commensurate with the use of the Titan III-L expendable 
booster for Space Shuttle, 

c. Propulsion System s Monitoring : The monitoring function is 

performed during ground operations to assure that designed 
parameters (such as tank pressures) are within their speci- 
fied limits* and during flight for fault detection and for 
performance data acquisition. During ground operations 
(after booster/orbiter mating)* the booster propulsion 
system monitoring function can be performed by ground 
support equipment (GSE)* by orbiter onboard equipment* or 
by a combination of these two. Similarly* during flight 
the monitoring can be accomplished with telemetry, by 
orbiter onboard equipment* or by a combination. 

In correspondence to the recommendations to employ 
ground support equipment for the ground control and check- 
out functions* it is recommended that such equipment also 
be used for the ground monitoring function. This conclu- 
sion is again based on the logic that the basic design and 
basic operating procedures of the equipment has previously 
been developed and used on the Titan III program. 

From the information presented in Table IV-8* Data Acquis- 
ition Requirements, it can be seen that nearly all of the 
inflight propulsion monitoring data is to be used for 
propulsion performance analysis on a postflight basis. 
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Telemetry is used for this purpose on Titan III vehicles; 
the Titan III design could be adapted to the Titan III L 
configuration through expansion to accommodate the larger 
number of engines and SRMs. This is the recommended 
approach, with the remaining data (to be acquired for 
fault detection and crew caution and warning) accommodated 
by orbiter onboard monitoring. 

D. CHECKOUT AND MONITORING IMPLEMENTATION 


The following paragraphs delineate the selected Titan III L pro- 
pulsion measurements and sensors, and describe the checkout approach 
and equipment. 

1. Meas urements and Sensors : Table IV- .12 presents selected 

measurements, identifies the source from which the measure- 
ment requirement was derived, and summarizes the justification 
for the measurement. Table IV- 13 defines the usage of the 
data. Table IV- 14 describes the corresponding sensors. The 
locations of the measurements are shown schematically in 
Figure IV-16 for the main propulsion system, and in Figure 
IV-17 for the Solid Rocket Motors. Measurement quantities 
are summarized in Table IV- 11. 


TABLE IV- 11 
MEASUREMENT QUANTITIES 

r 1 


CONTROL 


Liquid Engine (each) 1 
Main Propulsion 15 
Solid Rocket Motor (each) 5 
Propulsion System Total 35 


NOTE: Redundancies not included. 


FAULT DETECTION, 
CAUTION AND 
WARNING 

PERFORMANCE 

ANALYSIS 

TOTAL 

3 

24 

28 

20 

113. 

148 

2 

3 

10 

28 

125 

188 





TABLE IV-12 Measurement Selection Criteria 
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MEASUREMENT REQUIREMENT SOURCE USAGE JUSTIFICATION 
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2, Ground Support Equipment : The Titan III L operational flow is 

depicted in Figure IV- 18, The checkout and testing activities 
at the subsystem, system and vehicle level are indicated in the 
figure. The associated test equipment is identified in Table 
IV-15. The following paragraphs present an overview of the 
countdown operations and the electrical launch support and 
checkout equipment to show the relationship of that equipment 
to the propulsion systems during launch operations. The launch 
control system is divided between the Launch Umbilical Tower 
(LUT) equipment room and the Firing Control Room at the VAB as 
indicated in Figure IV-19. The launch sequence consists of an 
R-Count which starts at approximately T-28 hours and a T-Count 
which starts at T-195 minutes and terminates at T-0. The vehicle 
is brought to a state of readiness during the R-Count via manual 
checks and operations under the direction of the pad test con- 
ductor. During the R-Count, the propellant tanks are loaded 
and pressurized under the control of the Propellant Transfer 
and Pressurization Control Set (PTPCS), and the ordnance Is 
installed. The propellant tank vents are removed near the 
beginning of the T-Count, T-195 minutes. During the T-Count 
at approximately T-45 minutes, the final flight controls 
check is conducted utilizing the vehicle checkout set (VECOS) , 
This equipment verifies the proper operation of the flight 
controls system and the propulsion system gimbal actuators 
and thrust vector control valves by applying discrete input 
commands and monitoring for the proper response. The VECOS 
automatically controls the test by means of a tape programmer. 

The T-Count is semi-automatic consisting of a number of manual 
functions under clock control until T-35 seconds at which time 
the sequence is completely automatic. 

The Control Monitor Group (CMG) controls the time- and event- 
based countdown for the T-III L booster. The CMG is under 
direct control of the Launch Control Console (LCC) via the 
Data Transmission System (DTS) . The CMG receives command sig- 
nals from the LCC for commencing, resetting, holding, and resum- 
ing the countdown. The CMG sends signals to the LCC indicating 
that signals have been received and certain actions have been 
taken, and to identify holds. The CMG has the capability to 
issue control functions, monitor launch functions, provide 
hold, kill and shutdown capability during the launch sequence, 
reset the system, patch input and output signals, provide sim- 
ulation signals during combined systems test, and drive the 
countdown readout indicators at the pad and in the Firing 
Control Room. 
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Figure IT-18 TITAN IIIL OPERATIONAL FLOW 
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TABLE IV- 15 


PROPULSION TEST EQUIPMENT 


TEST EQUIPMENT 



EQUIPMENT LIST* 


Rocket Engine Test 
Set 


The Rocket Engine Test Set is used to ac- 
complish the following: 

Leak Tests 

• Propellant Systems 

• Turbopump Seals 

• Hot Gas Systems 

Functional Tests 

• Thrust Chamber Pressure 
Switches (TOPS) 

• Thrust Chamber Valves (TCV) 

Electrical Continuity Tests 

• Start Cartridge Squib Wiring 

• TCV Pressure Sequencing 
Valve (PSV) Override 
Solenoids 

• Thrust Chamber Pressure 
Switches 

Electrical Resistance Tests 

• Start Cartridge Squibs Circuit Wires 
to Engine Frame Ground 

• TCPS to Engine Frame Ground 

• TCVPSV Solenoid to Engine Frame Ground 


1, 2, 4 


Instrumentation 
Test Set 


The test set is used to test temperature 
transmitters, pressure transmitters, therm- 
ocouples, frequency-to-dc converters, 
thrust chamber valve potentiometers, and 
position indicators. The test set performs 
two insulation resistance checks, contin- 
uity/resistance check, zero stimulus check, 
50% or 75% stimulus checks and a frequency 
check. 


Ordnance Test Set 


This portable test set is comprised of ord- 
nance test equipment and an adapter cable, 
and is used to checkout ordnance devices, 
ordnance wiring and to check for stray 
voltages prior to installation of live 
devices . 


2, 4, 5 


Turbopump Pressure 
Leak Test Kit 


Verify integrity of turbopump seals. 


Electromechanica 1 
Valve Test Set 


Verify TVC EMVs are functioning properly, 
and do not leak. 


*See Figure IV-18 
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PROPULSION TEST EQUIPMENT (CONTINUED) 


TEST EQUIPMENT 

USE 

EQUIPMENT LIST* 

TVC Test Kit 

Verify TVC EMVs are functioning after being 
installed in the manifold, and/or to the 
SRM. 

2, 4 

Critical Circuit 
Veiriiication Test 
Set 

Verify the integrity of SRM electrical cir- 
cuits. 

1, 4, 5 

TVC System Pressure 
Leak Test Kit 

SRM Pressure Leak 
Test Kit 

Establish the integrity of all components 
in the TVC system. 

Check for leaks at segment, head end, and 
aft end closure flanges of the assembled 
SRM. 

5 

4 

Instrumentation Test 
Set 

Check operation and calibration of SRM 
instrumentation. 

1, 4 

Ordnance Test Set 

Nondestructive testing of SRM ordnance and 
ordnance circuits. 

2, 4 

CORE 



Electrical Wiring 
Test Kit 

Verify continuity and resistance of all 
wiring. 

1, 4, 5 

Prevalve Test Kit, 
Including Boroscope 

Verify prevalve functions open/close, veri- 
fy position before prop, loading, and check 
for foreign material on top of prevalve. 

2, 4 

Hydraulic Control 
Unit 

COMBINED SYSTEMS 
TEST EQUIPMENT 

This item of pro table ground equipment is 
used to perform fill, flush and bleed op- 
erations on the core hydraulic system* The 
HCU provides the means for stroking the 
core actuators, for commanding the VPDS to 
operate the core electrically driven hy- 
draulic pumps, and for monitoring hydraulic 
pressure , hydraulic system reservoir level, 
and hydraulic accumulator precharge 
pressure* 

4, 5 

Electrical Test Set 

Verify the integrity of all SRM to core 
and core to engine interfaces and the com- 
plete booster electrical system* 

4> 5 


*Sse Figure IV-18 
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TABLE IV- 15 


TEST EQUIPMENT 


PROPULSION TEST EQUIPMENT (CONTINUED) 



EQUIPMENT LIST* 


Ordnance Test Set 


This portable test set is composed of ord- 
nance test equipment and an adapter cable, 
and is used to checkout ordnance devices, 
ordnance wiring, and to check for stray 
voltages prior to installation of live 
devices . 


Instrumentation Test Used to test temperature and pressure trans- 
Set mitters , thermocouples , frequency conver- 

ters, thrust chamber valve potentiometers 
and position indicators. The test set also 
checks insulation resistance, and contin- 
uity/resistance. It can also be used to 
step calibrate. 


*See Figure IV-18 














During the T-Count, power is supplied to the SRM squib firing 
circuits when the pad safety officer installs red arming plugs 
in the Van Power Distribution Control (VPDC) rack. 

The Data Recording Set (DRS) is initialized during the T-Count. 
The DRS records the time and change of state of discrete signals 
and events during the launch sequence. It receives timing infor- 
mation from the CMG. The DRS is used for troubleshooting and 
fault isolation of countdown sequence malfunctions. A remote 
DRS is provided in the Firing Control Room. 

At approximately T-2 minutes in the count, all instrumentation 
recorders are started. Data from these recorders is subsequently 
used for postflight data evaluation of the booster telemetry 
and landline instrumentation measurements. The recorders are 
part of the Ground Instrumentation Equipment (GIE) which is 
located in the Instrumentation Room adjacent to the Firing 
Control Room in the VIB. In addition to recorders, the instru- 
mentation in the VIB consists of a Control Console, receiving 
antenna, receivers, decoding equipment and patching capability. 
The GIE in the instrumentation room interfaces with GIE located 
in the LUT. The GIE in the L'JT consists of signal conditioners, 
patching and encoding for landline measurements, and voltage 
controlled oscia 11a tors to modulate signals for transmission 
to the instrumentation room. 

At T-35 seconds, the automatic terminal count is initiated. 

From this point through ignition of the SRMs, sequencing of 
events is controlled by the CMG which issues the required com- 
mands at preprogrammed times and assesses feedback signals 
to be considered as prerequisites for subsequent commands. 

At approximately T-20 seconds the CMG commands that the SRM 
ignition circuits be tested. This command causes a test cur- 
rent of low amperage to be sent through the ignition circuits 
to verify proper installation of the live ordnance device. 

Stray voltage detectors (SVDs) in the SRM igniters trip as a 
result of the test and light SVD monitor lights on the flight 
safety rack. The SVD monitors are then reset via the CMG. 

At approximately T-15 seconds the CMG initiates the countdown 
steering test which is the final prelaunch test of the Guidance 
and Control Equipment. The CMG verifies that the LRE actuators 
and TVC valves move off null during this test. 
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At approximately T-10 seconds the CMG commands and verifies 
the arming of all ordnance* 

At T-3 seconds the CMG initiates the Liquid Rocket Engine (LRE) 
start sequence* The closure of all thrust chamber pressure 
switches (TOPS) on the LREs provides the CMG with the indica- 
tion that LRE chamber pressure is sufficient to permit ignition 
of the SRMs at approximately T-0*25 seconds * 
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3* Safety Requirem e nts : Prior to all ordnance installations a 

Standard Ordnance Circuit Verification Unit (SOCVLf) is used 
during simulation tests to verify ordnance circuits. During 
ins talla tion, an Ordnance Item Test Set (OITS) is used by the 
installer to verify that the circuits are safe for ordnance 
connection. A description of the ordnance checkout tests is 
presented in Table IV- 16 . 

One of the major tasks of the ordnance system is to start the 
Solid Rocket Motors* This is accomplished by the SRM igniter 
assembly which is composed of three major components (Figure 
IV-20): the safe and arm device, initiator and the main igniter 
charge* The main igniter charge provides sufficient hot gases 
to ignite the SRM propellant* The initiator provides the neces- 
sary ignition step between the safe and arm device and the larger 
igniter* The safe and arm device is the control and firing unit 
for the initiator/igniter assembly. The safe and arm device 
is mounted in the igniter top boss and contains dual ignition 
squibs. The squibs are fired by a 28 VDC charge and ignite at 
4*5 amps* The 28 volt charge to the squibs originates at the 
Transient Power Supply (TPS) bus in the core and is switched 
to the squibs via a Squib Firing Circuit (SFC) in the core 
vehicle , 

The major components of the safe and arm device used in the SRM 
Ignition train are shown in Figures IV-21 and IV-22, Figure 
IV-23 is an electrical schematic of the unit and the connecting 
circuitry. This device incorporates the following safety 
features: a housing which interferes with easy access of the 

squibs whether the device is in the safe or arm position (Figure 
IV-22). This housing also prevents the output from the squibs 
from reaching the SRM igniter unless the squibs are directed at 
this window only when the device is in the arm position (Figure 
IV-21); if the squibs inadvertently fire while in the safe 
position, the output will be dissipated within a free space of 
sufficient volume to prevent rupture of the window. To check 
electrical continuity a squib simulator (resistor-switch) is 
connected to the firing circuit when the device is in the safe 
position* To fire the squibs, the squib retainer must be 
rotated 120 degrees so that the squibs face the blowout window 
(Figure IV-21)* The arming signal rotates the squibs to the 
firing position* After approximately 105 degrees of rotation 
the circuit is complete; rotation ceases when the shaft has 
turned 120 degrees. When the squibs are in the safe position 
they are disconnected from the firing circuit and are short 
circuited* An externally visible letter, A for armed and 
S for safe, are aligned with the safe-arm mechanism to indicate 
device status (Figure IV-22)* Also, internal shaft operated 
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ORDNANCE CHECKOUT SEQUENCE (CONTINUED) 
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MECHANICAL SAFETY LOCK 



Figure IV-21 Safe and Arm Oevice 
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Figure IV-22 Dismantled Safe and Arm Device 



IV-74 



m 


\ 


W 

CO 

O 




Figure IV* 23 


SKM Ignition Circuitry 


NOTE! SUM Igniter Initiator is Replaced with Standard Ordnance 
Circuit Verification Unit (SOCVU), and Inert Initiator 
Until Live Ordnance Installation. 
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switches permit remote indication of device status. A manually 
engaged lock prevents actuation of the device (Figure IV-22). 

Once this lock is removed the unit can only be armed electrically; 
however, the device can be either electrically or manually actuated, 
to the safe position. A temperature control switch prevents 
the overheating of the squib simulator resistors and prevents 
inadvertant firing. The device and its housing retains the 
SHIM igniter pressures. 
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APPENDIX A TITAN II l-L FMEA 


The objectives of the failure modes and effects analysis 
(FMEiA) were to determine the potential propulsion failure modes 
and resulting effects on the subsystem, system, and mission; 
and establish the criticality of the failure and identify can- 
didate failure detection methods for each failure mode to aid 
in establishing propulsion system measurement requirements. The 
groundrules and approach used in conducting- this analysis are 
described on page A-2. This appendix contains the FMEA analysis 
sheets. 



FMEA GROUND RULES 


A- 2 


1. The FMEA was conducted for the operational mode only. 

2. The FMEA was conducted on all components identified in the Titan 
III L propulsion system definition. (Structural members which 
perform no function other than providing structural integrity 
were excluded.) 

3« Electrical cables, wiring harnesses and instrumentation were 
excluded from the FMEA, except where such equipment (such as 
sensors) were required for control functions within the propulsion 
subsystem. 

1+ o It was assumed that the proper electrical signal was always trans- 
mitted from the control source to the propulsion component requir- 
ing such a signal. 

5- Human errors were not considered in the failure mode and effects 
analysis . 

6. Failure modes and effects of active and passive thermal protection 
devices were excluded. 


7* Leakage considered in this analysis was categorized to the degree 
most probable; taking into account the leak path, sealing method, 
pressure and medium involved in the area under consideration. 
Leakage requiring a structural failure of the component was not 
analyzed. 

8. Redundant components were identified. 

9. The following criticality categories were utilized for potential 
effect of component failures: 


Category 


Potential Effect of Failure 


1 Loss of life or vehicle 

2 Loss of mission 

3 All others 


a Launch delays were classified as criticality 3* 

b The transition point from launch delay, criticality 3 above, to 
loss of mission, criticality 2, is considered to occur at the 
Ignition of the solid rocket motors. 

c The loss of one engine was considered as loss of mission (criticality 
2) since the mission requirements and vehicle capability with one 
engine out were not fully defined. 
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C OMPCH EM T LUBE OIL HEAT exchanger 
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backpressure orifice 
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